Subpoena Meta for all of the IPs of the account. Subpoena the ISPs for data who was using the IP. Bring in the likely people who were sending the message for questioning.