The mobile phone company might well have done a credit search.
very likely, I get notified by equifax of events such as new mobile contracts, or bank accounts etc (my credit record was part of the mass hacking, so I get free notification of such events)