Tell them nothing. Not about the business, not even your name.
Couple years ago, a salesman cold-called Joe, our naïve Facilities guy. Pried out seemingly innocuous info about our fluorescent lights of all things. Joe didn't see a problem answering, because it's not exactly a trade secret, and Joe wasn't committing to buy anything.
Next thing you know, a shipment of F40T12 fluorescent tubes (our size) shows up, with a nonsense P.O. and Joe's name. The gift shop accepted them, assuming Joe ordered them. And later, a bill. And more lights. And more bills. And finally the accountant realizes we're on the crazytrain here, calls Joe, who denies ordering any of it, and puts the kibosh on this. After $9000 of invoices were paid. That's 1% of our budget.
It's no accident when they want to talk to you
The scammer looked at public data about companies like us, looking for companies small enough that it is likely we had poor internal controls.
That's what that's all about. They want to glue your name to some bit of info about your company that will let them ship undesired goods or otherwise scam the company. Or work a scam later, like call someone else, drop your name, and then have surprising knowledge about your company to make it all seem legit.
Historically, you'd see this scam with copier toner or thermal fax paper: Someone would cold-call and ask "I'm with your regular office supply, could you remind us, what's the brand of your copier? And your name is?..."