I got "SIM swapped" on a T-Mobile number even though my account had 2FA protection on it.
A T-Mobile customer service in another country rep literally gave my number to a hacker because they asked for it.
I suspect that many of these numbers are SIM swapped.