Hacker News Reader

If either the website or the mobile apps use any one of a large number of ads libraries or analytics toolkits, they get the data which is then packaged and sold.

https://en.wikipedia.org/wiki/Similarweb#Technology

Buying data panels of web browsing history from web browser extensions is one technique that is possible.

Disgruntled employees, estimates based on traffic to/from other websites, analytics from advertisers.