although the bitcoin was recovered but it took time before the recovery was made.
I’m still very confuse about the whole scenario,as to whether the bitcoin was back for sure or not because am always skeptical about bitcoin lost.
The only possible way to recover like that is: the law enforcement agencies find the hacker, detain him and either he somehow agrees to give out his keys, either they find his wallet keys in the computer (or other things) they seize, hence finding the tx history AND having the means to send the coins back.
So find the hacker, find the wallet keys and find the coins in the wallet... I find it an incredibly unlikely situation and I agree with @Charles-Tim: this smells like advertising of some scammy "recovery services" that will just get the gullible one pay them money.