Do you have access to your Self Serve account?

Check that you still have access to your Self Serve account. As a precaution, change the passwords on the account(s). It’s not so much about changing account numbers and more about accessing the account and using services fraudulently. On the other hand, it may have been a legitimate call. Wait for the callback and find out what the rep has to say. Still, change the passwords on the accounts just to be safe.

Koodo and bell? That's odd. Koodo is owned by Telus. Unless it's someone with a mobile seller in general, it sounds a bit off. I'd think password changes are a good precaution and make sure you've got your recovery password options up to date.

Do you know the number she received the call from?

That sounds extremely fishy. To make sure that you do not become a victim of SIM swap fraud, I would suggest you to ask the rep to include Port Fraud Protection on your plans once you receive your callback. https://www.koodomobile.com/en/help/port-fraud-protection