Probably exactly the most boring, mundane way you would expect: they managed to contact the owner of what was probably a dead/inactive account and then paid them some money for it.

I don't know but that's not relevant to my point..