That could be any of hundreds of current and former students. It's not legal to do investigations like this since it ends up with a bunch of innocent people getting caught up in the surveillance dragnet, but they do it anyway and use a strategy called "parallel construction" to build a legal case against the suspect that coincidentally incriminates them for the primary crime.