Either server logs, or the hackers sending them part of the data they have to prove they're ligit. I assume the latter would have happened if Reddit had shown any interest in negotiating.