Once the Guardia Civil obtained the iCloud email address, the documents show that it requested information from Apple, which in turn provided a full name, two home addresses and a linked Gmail account.
I have mixed feelings about this. This doesn’t sound to me like the actual iCloud data but rather it’s metadata for an account the police know already exists. It’s certainly not great, but it could be worse.
Expect that's not what happened? Why are you spreading misinformation? Blame them for what they actually did. Namely giving out metadata of an iCloud account, such as associated email accounts, owner name and address.