Nothing like that is required, if you see them on same mobile tower or wifi networks often enough you can say with huge certainty they are owned by same individual.

Basically any piece of information that can be correlated is enough once you have enough data points. Hell, you could probably figure out a way to correlate it by temperature sensor readings

Not even that is required, you just need one other person that has both numbers linked to the same contact on their phone.