SBI — credit card phishing

I received a call claiming that it was from sbi. The lady gave me her details and made me believe she is an employee from sbi. She also confirmed my residential address date of birth and card expiry number she just wanted cvv. And wanted otp to confirm my details. She said it is a verification call and sbi will never make phone calls. An as i gave my dtails certain amount got deducted. As soon as i called back sbi they said it is a false call.

I question sbi how did a third party know my details. Including my card number residential address. She also knew i never used the card and my biling statement.
Is sbi not taking necessary measures to secure its bank employee details.