I think it’s more likely that they reach out to the people buying their leaked data on the black market and request feedback on whose profiles they were able to use to gain access to credit or not. Those profiles obviously must have good credit so they bump up their scores.