My big questions is why were the suspects faces in the database? Why would a 19 year old, never done anything face be in the facial recognition database?
Everyone who applies for a US visa is additionally photographed and fingerprinted.
Everyone who applies for naturalisation is additionally photographed and fingerprinted.
The suspects did all three of these things. The US government has almost every foreigner legally on American soil in a database.
Plus then you have the DNV on top of that and or passport office.