Data stolen from about tens of millions of Target customers during a massive breach was stolen from a vendor, Target stores said on Wednesday.