In rushing to leave Germany, the sabotage crew neglected to wash the Andromeda, allowing German detectives to find traces of explosives, fingerprints and DNA samples of the crew.

Investigators later identified their mobile phone numbers and their Iridium satellite phone. That data allowed them to reconstruct the entire journey of the boat, which moored in Germany, Denmark, Sweden and Poland. U.S. authorities sought a court order to obtain from Google the emails a Ukrainian businessman used to lease the boat, and handed them over to the Germans. That Ukrainian businessman had contacted a number of boat rental firms in Sweden as well as in Germany, starting from mid-May 2022.