They don't have to know anyone's identity. They can just go through a parking lot and hit all the cars there.

BTW, almost everyone's address is already online for anyone to see. Whitepages, Spokeo, and more sites have all kinds of information. You can find addresses, phone numbers, emails, and party registration. Some of those sites also list relatives and other associated people. I use them in genealogy sometimes.