It stands to reason that retailers link transaction information--including serial number--to unique individual identifiers. It is possible this data is traded.
It is depressing that people in Western democracies have to worry about authorship identification via printers the same way people in the DDR had to worry about authorship identification via typewriter. But here we are.