262
Police shut more than 14,000 accounts on Mega, Tutanota and Protonmail
(therecord.media)
This is a most excellent place for technology news and articles.
There's typically reason to suspect the account owner first. They're not trawling through random accounts, law enforcement doesn't have the time or authority to do that. Note that intelligence agencies are not law enforcement, I'm not talking about what some spy agencies might do.
Since this is law enforcement, typically you don't have a verdict to rely on, but they'd have a warrant or subpoena to get the necessary evidence to further the case.