I don't imagine they have raw sql access but you probably have an API that takes a name or social or other identifier and returns relevant results. This access may have been granted to an account that is not described as "FBI" it's probably another sub-contractor or analytics provider.