As far as I know, there's nothing to stop employers from exchanging salary information directly with previous employers under quid-pro-quo agreements.

And there's nothing to stop employers from buying/renting this information from third parties, such as recruitment agencies or brokers in personal data.

All of these are arguably more reliable sources of salary information than asking the candidate directly.