The thing that confuses me is that the data in question was described as metadata, which I wouldn't expect to contain attachments. Unless, by metadata they mean thumbnails generated by the email server. It sounds like the lawyers explicitly said they received an illegal image, not just going by a filename in the metadata or something.