Something not talked about. Big uptick in robo calls since sites started texting me security codes to sign in.
The story I've heard several times from different people about how it's handled in Poland - your operator usually subcontracts their support & telemarketing to a third party; some spammer will pay an employee of that third party to "liberate" their customer database as they end their employment.
Bonus: a FU to warrantless NSA metadata spying.