I'd say the most obvious is an old e-mail sent to her containing the username and password. Do we know for certain that the judge who issued the warrant was aware that the same username/password was repeatedly issued to different persons?

> The fact that they were able to get a search warrant suggests they have some evidence pointing to her.

Warrants do not require evidence, just a signature.