Like any person looking to find info. Ya hire investigators, pay leaks, look for info, etc. Some or all could be false. But, money and resources can get stuff.
Either there is a breach of Cohen’s confiscated records or someone at the bank made some copies.