Mozilla says that “there are a number of places where we collect and share some data with our partners” so that Firefox can be “commercially viable,” but it adds that it spells those out in its privacy notice and works to strip data of potentially identifying information or share it in aggregate.
Sounds like they've already been selling (or trading) data and this whole debacle is a way to retroactively cover their asses.