Still curious how they specifically recovered the bitcoin. Was it transferred to an exchange? Grabbed when they tried to convert it to fiat? Physically recovered a cold wallet?
The comments from DarkSide hint that law enforcement requested access to the payment server and transferred from there.