A sybil attack to catch a terrorist would still be one hell of a case budget. I think he just used an app that leaked data. Every other day I'm sure the Tor browser is patching more and more of these. Browser technology is a dense thicket of privacy leaks.
There's been too many such cases altogether (this is the second I hear) to not be of the opinion that privacy technology needs a reboot. Roger has failed us.