I nearly got phished by Citi recently because their call center gave/sold my info to a phishing network. I had called their support line to dispute a charge, s

I nearly got phished by Citi recently because their call center gave/sold my info to a phishing network. I had called their support line to dispute a charge, spoke to an agent for a bit, and they put me in the dispute queue, and then hung up on me after 20 mins waiting. I call back, repeat the process, wait 20 mins and got hung up on again. Then an hour later, I received text message telling me that my Citi account was frozen, with a (phishing) link to reactivate it. I had called Citi using a new phone line (not linked to my existing Citi account), so for the phisher to text this new number means that the call center must have leaked it soon after intentionally hanging up on me. It’s possible that my number was randomly targeted, but the timing was very very suspicious.