Interesting. When Twilio kicked them off of their platform, this caused Parler's email authentication to "fail open". Meaning anyone could access any user account. So they (the hackers) are now able to download everything.
Apparently "everything" includes verified accounts, which have real-world state ID card photos attached.