…and you know which telephone numbers send data to the pager and at which time. That is sufficient to track or identify individuals.

If this is a supply chain attack, the attacker already knows, which pagers are part of the organization they want to target.

What this thread here shows really well, is that the general population vastly underestimates the abilities of intelligence agencies and technology in general.