Herrera, 30, was not named as a suspect in the FBI affidavit. Per NBC News, "IP and email addresses can be masked or spoofed through a variety of technologies, and Internet data can be routed through third-party computers without their owners' knowledge using any of a number of software packages." So again, while Herrera is identified in the documents, this does not necessarily mean he is considered a suspect.
Investigators got a warrant to search Herrera's home, but it's unknown at this time what was found. In obtaining the warrant, though, the FBI revealed that nearly 2,500 iCloud accounts were targeted. According to the affidavit, the computer address linked to two email accounts belonging to Herrera was successfully used to access 572 accounts, each an average of about six times; the computer address was used in nearly 5,000 attempts to reset 1,987 other iCloud passwords. This seemingly supports Apple's initial statement that the hacking was the result of a targeted attack on usernames, passwords and security questions—and not a fault in iCloud's security settings.
ncG1vNJzZmivp6x7prvNpaCnnV6YvK57zZ6urGdma4JxfpJomp6klZe0osDEZqWunJVivam706hkoZmToHqjvsSamqGdlGK7pq3RpbBmbmBleqKvwqisp6yjYrOjtYysmLKrXZ67t7HSraCgmaSevK95y56Ynatdqbxur8eimpqfnw%3D%3D