I'm not sure if they stole it directly from the sites (coupon site in my case) or from the clearance company. In any case it seems that the site who store the details broke the law by storing the CVV (not to mention that passwords were not encrypted..)