Just a guess, but maybe the CBP takes pictures of the license plate at land border crossings?
They have a joint venture with DEA to have fairly comprehensive coverage of interstates. Also, private companies offer LPR services and sharing, not sure if this company did or if that database was breached.