They used their OWN data. I.e. purchases in their store. They buy other records to supplement. Can you point me to the quote in that article that says Target buys a list of purchases _from other merchants_ via the CC processor?