I just got a caller to go into their CRM and find out the source:
It's Lusha!
They're a data broker selling private data without user consent! I can find various complains about them online.
These fuckers are selling data on me — my private phone number included. I have zero idea where they got it from in the first place.
Gonna send them a GDPR Request that hopefully should stop downstream folks from getting my PII data into their systems.
Wild!