Interesting: the article states he used "an encrypted application" but follows that with contents of the communication from that app.

Did they break the encryption or access the communications through device exploits (once in plaintext).