They didn't have some secret way of defeating 40 bit encryption; anyone could do it. 512 bit asymmetric encryption was also brute forced by a private entity, albeit at a high budget.