It comes from many different places and is cross-correlated at many levels. From credit card purchase history to social media to phone location data, across multiple agents and brokers throughout the data market. See: Data Breaches, Crisis and Opportunity (ISBN 978-0-13-450678-4)