IIRC the data they used was their own, that is, they seeded a pirated version onto the known suspects themselves and through the online functionality (iirc a leaderboard of creating the highest tower) were able to detect it.