That’s one class. Another class is if the number was in a credit application or marketing form, then got resold or data-breached.
I only put burner numbers on forms. They start to get called about 90 - 180 days later. Not all, but enough you don’t want to give your cell out.