The Klarna site has a good page about the breach, including
"When someone gives up their phone number - maybe changing providers or getting a new one - the old number is eventually reassigned to another person by the provider. This can cause issues for services that use phone numbers for identity verification or login, and is a challenge faced across the tech industry."

So stop doing that, eh?
Of *course* we change phone numbers (and email addresses)!