I've more than once asked a cold-call recruiter how they got my number where the answer has been a rather candid, "there are markets for such information".
Kinda makes me regret the few years my LinkedIn profile had my phone number public, but I do wonder how successful these questionable personal data marketplaces are. I certainly haven't had a conversation get beyond "this is spam".
Check out http://intelx.io, depending on your risk tolerances, putting your email and phone number in yet another search bar may not be in the cards. If you can swallow it though, depending if (1) anything you care about has been leaked at all and (2) anything you care about being leaked has been indexed by this site...the results may be illuminating. Or nothing at all.
Interesting resource nonetheless that supplements my day-to-day line of Devsecops.
This site and a few other OSINT tools was how I discovered who 'sold out' my CV to some of the questionable 'recruiting agencies'.
Kinda makes me regret the few years my LinkedIn profile had my phone number public, but I do wonder how successful these questionable personal data marketplaces are. I certainly haven't had a conversation get beyond "this is spam".