This afternoon, DH and DD (age 22) both got texts from "Bank of America" urging them to call a certain phone number.
DH called me right away, I checked our balances, and saw we were fine. (DH does nothing with our banking). I googled the phone #, and saw it is a scam. No harm, no foul.
5 minutes later, DD calls me. She got the same text, BUT SHE called the number back, and gave them ALL and I mean ALL, her personal information! She is at work, or I would have prevented this.

She realized it was odd, and called the REAL BoA 5 minutes later. They said scam, and closed her accounts off, will send her a new debit card. They said, not to worry, you are flagged to someone trying to open a new account, etc. But jeez, she even have her SS#!! Couldn't the scammer just go to Chase and open a card or something. And shouldn't they send her new checks and everything?
She is freaking out, I am looking for advice on what to do next, to prevent this error from being a full fledged identity theft.
PS DD called, because SHE is set up for text alerts from BoA, she gets them for low balances, and when direct deposits are credited, etc, so it was not weird to her that they would reach her by text. And she said when she called, it even had the BoA chimes or something.