Investigators believe much of the financial and identity information was stolen from mailboxes and trash bins by crews of "runners." Authorities also think at least one business' list of customer credit card numbers was obtained, though they don't know where or how.
all it would take is one speed freak with physical access to a hard copy of a customer list and a few people getting some crank in exchange for CC mail and there ya go...nothing hi-tech here.