They might've purchased a decryption key from some dark corner of the internet and after failing to trace the money to the bad-guy they're now hoping to track him down by IP address. Probably it would surface in court that you're not the bad guy they're after, but who knows what kind of bad things they'll do to you in the meantime.