Prosecutors say surveillance images, restaurant employee tips, rideshare data led to the suspect’s identification.