[vocatus_gate]

Would salting the hashes be an improvement?

I ask knowing very little about their security model.

[lima]

No, they're doing that already. The issue is that phone numbers are so short that you can just calculate the salted hash for all of them. You don't need any rainbow tables for that.