The process is in my theory the same as how e-mail addresses are acquired for spam via other companies: http://bit.ly/4wdjg7