Is this a violation?

[SecretAgentWoman]

I called a collection agency to see what they would say, they are a JDB that referred me to their collector.

So, I called the collector who wanted my SSN. I said no, but I gave her the account number. "We need our account number." Called back the JDB "we only have our account number." Haha.

So, I call back CA, and this time they miraculously found the account with my name this time, and get this - she read to me my entire SSN just to prove she could.

Now, she had no way to verify that the person on the other end of the phone was real - what do you think about that?