(UK) Almost gave away my bank login to a scammer

I got a call that popped up on my phone as my bank’s actual number. Caller ID matched perfectly, so right away I thought it was legit. The guy on the other end sounded professional aswell.
He started by asking if I’d noticed any weird charges on my account and then rattled off a couple of details about me that made me believe him. He had my full name, the last 4 of my debit card, and even my current address. That’s what threw me. I figured if he knew all that, he had to be real.

He told me there was “fraudulent activity” and that I needed to verify my login info so he could secure my account. For a second I was about to read it out to him, but something in the back of my head said don’t do it. Instead I told him I’d call back through the number on my card. He tried to pressure me, saying it was urgent, but I hung up.

When I called my bank directly, they confirmed there was nothing wrong with my account. The rep basically said scammers spoof their number all the time and use info they buy off the internet to make it sound real.

That part is what really freaked me out. It wasn’t some random guess they had enough of my personal info to almost trick me into handing over everything. Makes me wonder how many old breaches or shady data broker sites my info is floating around on. I feel like once it’s out there, it’s impossible to fully lock down. I’m getting all paranoid and stuff now, hope this kind of targeted attack doesn’t happen anymore.