I don't think it is a security breach to ask for the phone number for IT.
I think it is fair to assume that an employee with a company laptop should be able to VPN so they can get email, do business, etc.
I also don't think it needs to be a secret that I work there.