> It comes from a lot of places. Voter records is actually a big source, but also I believe some of the various breaches have made it in. And all of those sites continuously crawl each other and trade databases as well.

I wouldn't be surprised if a lot of it comes from customer lists (either sold directly by the collecting company for a little extra profit or bought in bankruptcy/liquidation proceedings).