My guess is that Weiner and Abedine had a single cloud account to which both had access. That would be dumb to do with state information, but dumb/dishonest is how they got here.
I guess in that case the devices would’ve provided the links to the cloud account?