[Terr_]

Perhaps it's from the other end, and the employee's phone number and employment-info is insufficiently-private on social media?

Some scam-bot could be set to notice notice when people change jobs, use the company name to look up names of CEOs etc, and then fire off messages.