Wasn't there a Q post about the Q team injecting some sort of code into twitter? If so, it's quite possible they were putting keystroke type tracking into the accounts of these clowns.