When somebody confronts you with PII like that, the best move is probably radio silence. Neither confirm nor deny it, and don't even confirm that their message

When somebody confronts you with PII like that, the best move is probably radio silence. Neither confirm nor deny it, and don't even confirm that their message was received. Don't do free battle damage assessment for potential adversaries.