
The FBI took the image and checked the exchangeable image file format (EXIF data) that all digital cameras imprint onto an image. The EXIF data revealed information coming from an iPhone near Melbourne, Australia, which eventually led the FBI to Ochoa's Facebook page.
On March 20th, the FBI raided Ochoa's apartment and arrested him.
Says the FBI: "[He] created fake events on their online, posted images representing Anonymous and CabinCr3w, deleted the entire administrator accounts except the one created by the attacker."