I'm not exactly sure myself as it's beyond my IT abilities, but in the forum linked in my original post it appears to be a brute force - CVV is irrelevant, expiry is the same for huge batches of cards, then with the card number the first 8 digits are the same, the 9th digit refers to...