Earlier quoted context omitted.
When you request the records of 1.3 million people in an effort to find the identities of about 200, that feels ridiculously broad. I'm not sure what they're hoping to find, but it seems like security camera footage would be much more useful than this action, which seems to look more like cracking down on political dissent.
But when you request the records of 1.3 million conspirators to riot and commit other terrorist acts, in order to find the 200 who actually did, that's quite reasonable. The stated goal of the website was terrorism (shutting down bridges, checkpoints, etc.). Every single account is quite likely to be evidence of conspiracy.
As they haven't touched RICO, it seems likely they cannot consider all 1.3 million people to be conspirators, nor even a large number to be conspirators.