Do not give sensitive information to others unless you are sure that they are indeed who they claim to be and that they should have access to the information.
- I suggest reading the entire US-CERT Article, as this applies to both Individuals and Businesses - https://www.us-cert.gov/ncas/tips/ST04-014