Presumably the numbers were stolen along with associated identity information. The numbers can be easily guessed; they are created with a simple algorithm.