Target did not store the PINs. Storing PINs is forbidden by the PCI (Payment Card Industry) rules. If a merchant stores PINs or CVCs (Card Verification Code), he will lose access to the credit card system, and can't sell nuthin' no more.

The PINs were skimmed by malware in the POS devices.

Changing your PIN periodically is not a bad idea.