The automated calls often stem from personal information scraped from public websites or exposed in data breaches.