Is the person I sent my info to legit ?

I can see you received an email from a non-corporate address, just a free server similar to gmail (indeedmail.com)

We never recommend our users to fill a form that request for SS# unless you are sure it represents a legal or reliable company/organization.

I have suspended that account as it's violating our terms of use.