The rule of thumb is,
if they call you, you don't give out that information.
When you call them, you do.
FYI, Verizon and T-mobile both use a Pin code on top of the password. They have each asked customers to add this layer of security. Up til now, the last 4 of SS# was the default pin code, but it was easy to guess.