It's not clear that this came from a point in time dump, but like it has been getting harvested by someone for awhile. They may be deleting it, but by then a copy is made? Speculation after reading the article but that's what it sounded like to me.

Good point, "we have been continuously exfiltrating new data for over a year into our private database". I missed that line on first read.