[yjftsjthsd-h]

If nothing else, it's information disclosure; you should not be able to go from having a person's email address to having even part of their phone number.