The Threema app was not breached. The "messages" themselves were not "extracted", it was a zip backup and password was most probably known. BTW the accomplice who handed it over had it in his custody for months, so it's weird it was even admitted as evidence.