CVVs aren't just random three- or four-digit number, as it turns out.
Banks create them using four pieces of information: the primary account number, the four-digit expiration date, a pair of DES (Data Encryption Standard) keys, and a three-digit service code.