Citigroup breach estimate soars

Citigroup Inc. reported its May 10 data theft was more extensive than originally thought. It was believed 200,000 Citi customers lost personal information and credit card data in the breach. This number was based on Citigroup's statement that approximately 1 percent of its North American accounts had been breached. An update published on the Citigroup website June 15, 2011 says 360,369 U.S. accounts were compromised.

"Data that is critical to commit fraud was not compromised: the customers' Social Security number, date of birth, card expiration date and card security code," the company stated in its update.

Stronger security measures in place

Citi added it has since put enhanced security in place. It also notified law enforcement and government agencies of the breach. Lawmakers including Sen. Robert Menendez, D - N.J., and Rep. Mary Bono Mack, R – Calif., have criticized Citigroup for delaying its announcement of the breach for three weeks.

Citi also said it has issued 217,657 new credit cards in the wake of the data theft. Closed accounts and accounts recently issued new credit cards did not receive new cards after the breach but the company says it is continuing to monitor those accounts for suspicious activity.

California cardholders hit hardest

The company reported California led the list of states with the most customer data stolen – 80,545 accounts from that state were hacked. California was distantly followed by Illinois with 30,054 accounts compromised and Florida with 20,303 customer data thefts.

Citigroup stated it "cannot disclose further details regarding how the data breach occurred," because of customer security concerns, as well as the ongoing law enforcement investigation.

The Green Sheet Inc. is now a proud affiliate of Bankcard Life, a premier community that provides industry-leading training and resources for payment professionals. Click here for more information.

Notice to readers: These are archived articles. Contact names or information may be out of date. We regret any inconvenience.