@ljs Do you think they'll tell you where they got your number from?
… Actually. You could file a GDPR subject access request, asking for:
• Your number;
• How they got your number; and
• Any other personal data they have about you.
That should clear things up (and hopefully spook them into stopping those practices).