> along with actual messages (not metadata) from a Signal chat to make the case that the attackers planned on using violence

How did they get the actual messages? Signal chats and groups are supposed to be encrypted. I'm curious.