No I believe what they meant was the attackers knew that if they wanted to spear-phish Joe Smith from IT they had a way to correctly get Joe Smith’s phone numbe

No I believe what they meant was the attackers knew that if they wanted to spear-phish Joe Smith from IT they had a way to correctly get Joe Smith’s phone number to send a text to him, so things could be personalized and seem more legit.