Would love someone try to explain how a scam call I received had the info they had

A person applied for a credit card online with a bank where they had no prior account. Days later, their wife received a call from a number confirmed as the bank's, during which the caller knew personal details about the application. The person suspects the call was a scam with spoofed caller ID, as the bank could not confirm its legitimacy.