They are tracked by ip & then the isp hands over the information to the information collecting company, who then hands over the information to the RIAA's lawyers, who then send out letters, this girl probably sent back a letter saying "yes it was me, im sorry"
This is my best guess from friends who have recieved these letters....