How do these places get this information in the first place? It seems like it wouldn't be economical to get insiders to do it, and guessing firstname.lastname@c

How do these places get this information in the first place? It seems like it wouldn't be economical to get insiders to do it, and guessing firstname.lastname@company.com seems too unreliable