Sounds like the used other data to link the IP addresses that were used, not tracked the IP addresses directly through the VPN.
Privacy is pretty much fucked these days because there are so many identifiers being gathered your device ends up being "unique.". And if your device is unique, you can disappear in the U.S, appear in Spain, and when they look up who you are in Spain, they still know it is the same device.