They don't need their own bot if there are ones already made and they have access to them.
Whose to say they don't know the person who programs the bot and get the run the ATC's for free? Maybe they buy them in bulk for a discount? Even so, paying 100 or 150 over cost would still leave room for profit if they're being resold.
Vanilla Visa cards have zero addresses attached to them. Also there are many other ways to generate credit card #'s besides using those (online banking, etc).
Besides the whole debacle of the orders being forwarded in the UK being canceled, have you heard of Adidas US canceling anything? I have not seen it or heard about it. Addresses can be manipulated easily, as only certain billing info is needed to process the order.