Target didnt breach any privacy laws. It used internal customer information and external publicly available data. However, the fact that you can legally learn something private about your customers doesnt mean that its ethically appropriate.