I think in this instance they got the email associated with the iCloud and messaged her on that.

Edit: she replied to a comment on the article: "when trying to reset my phone they are prompted to enter my iCloud password. My iCloud email is also one of the ways to reach me via iMessage. So they used that to contact me"