You should never get a call from any company asking you to confirm your identity. Of course, banks (and other entities) are prohibited from disclosing private information without confirming your identity, but these entities should never initiate that call.With respect, this is 100% untrue. Banks are prohibited from disclosing personal information without identification and this is baked in all down the line. If there's any doubt, just ask for a direct dial and return the call.
I would never give out account numbers, addresses, phone numbers, or the last four digits of my SSN (the other five digits are never required to talk to someone, so having the last four is all a thief needs).
Banks, especially banks, should communicate in writing, asking for confirm your identity only when you initiate the call.
Not too long ago, I was the target for a fairly sophisticated scam involving my trust account. The scammers had the account numbers, and access to a fairly good copy of Chase Bank's cashier's checks. The scam did not work, but it attempted to get over $200,000 from my account. Apparently, some lawyers are nuts, and these scams sometimes work. The cashier's check never clears (of course), but the attorneys wire the funds before the check clears.