How did the attackers acquire valid, active Vodafone eSIMs without doxxing themselves?

https://kycnot.me/?categories=esim or simply used a fake identity on some online supplier's website.

UPD: NL, just like some other few countries in EU, doesn't require mandatory identification for SIM card purchases and activation