I have doubts that actually happened. This might be a tweet over simplifying the situation. Those call records might have been in the iCloud backup.

Edit: I meant those chats and call records. Plus call records are also a carrier thing, that’s fairly easy for them to obtain.

It's possible they wiped it and restored from a recent icloud backup. They could have had the account ordered unlocked by the court, or she could have had a sticky note with her icloud name and password somewhere that they found.

There isn't enough info to know.