Never give out any personal information on an inbound call
If it is an important call, and personal information is required, tell them that you will call their service back after googling their proper phone number; don’t call them back on a number that they give you.
Even if it’s a legitimate call, it’s better to be safe.