Investigators traced the first Coldcard theft wave to a paid data account, but the FBI has not confirmed identifying or charging anyone.