The three major US credit bureaus say hackers who have posted credit reports on celebrities and government officials in recent days did not breach secure databases but relied on personal information they collected elsewhere on the public figures.