Doesn't it have to be someone with a criminal record since the police must have already had his DNA profile?
Yout got me; maybe she told them?