Btw, I wish Satoshi thought more of the concept of nodes' reputation so you can somewhat know how efficient and legitimate the node is.
National Bureau of Investigation traced the hacker trough Monero transaction. First they sent 0.1 Bitcoin to the blackmailer's address and used that for statistical analysis tracing the money into and out of Monero.
ps.
The police unecrypted 64-character password was used to protect sensitive data on his hard drive. It was not random enough.
They 'took fingerprint' from a digital imange and used it for identification. The criminal on the run took a photo showing only his hand holding a glass. It was enough to see a fingerprint.