From the article: Some fucker bought 40k CSAM images with PayPal and when the authorities compared the hash of those images with the database they found out 285 known victims in 1500 images
The victims can file restitution charges
I hope the process is almost automated and the victims don’t have to relive the abuse with each trial (only 19 known victims applied in this case which makes me think it might be a painful process to apply…)
It’s either not easy or they didn’t find out or both