Is iCloud breach a hoax?

I just received a call supposedly from Apple Support telling me my iCloud had been used from 2 locations in different states. Is this a legitimate call or some scammers trying to hack my phone? The guy was walking me through steps in Settings which I wrote a couple down then asked if he could provide a web page with instructions. He promptly said I could call them back Layer since I said I was working. Has anyone else received this type of call?