In most organizations, the rule should be that any information that can possibly cause harm to the company or to a fellow employee may be given only to someone who is known on a face-to-face basis, or whose voice is so familiar that you recognize it without question.