Nobody is sure how they did it. Or even if it comes from iCloud.

The leakers themselves claim it was from iCloud (the actual leaker only bought it online from various hackers though, again according to him).