The hackers who stole millions of credit card numbers from Target have been tracked back to electronic credentials stolen from a vendor.