Citigroup hacked, customer data exposed
HONG KONG - Citigroup Inc. said Thursday that hackers accessed the credit card information of North American customers, in an online security breach affecting about 200,000 accounts.
The bank said it recently discovered during routine monitoring that account information for about 1 percent of customers was viewed.
Citi has more than 21 million credit card customers in North America, according to its 2010 annual report. The New York-based bank didn't say exactly how many accounts were breached.
The hackers were able to gain access to Citi's Account Online service to view customer names, their account numbers and contact information including email addresses.
They weren't able to gain access to social security numbers, birth dates, card expiry dates or card security codes.
The Citigroup online security breach comes on the heels of the high profile hacker attacks against multiple Sony Corp. sites. An attack against Sony's PlayStation Network site affected more than 100 million online accounts and forced the site to temporarily shutdown.
Sean Kevelighan, a spokesman for Citi's North America Consumer Banking division, said in an emailed statement that Citi is contacting customers who were affected and is putting in procedures to prevent the security breach happening again.
"For the security of these customers, we are not disclosing further details," he said.
The hacker attack was first reported by the Financial Times.
Popular on MoneyWatch
- How to stop the mediocrity pandemic
- Reverse cell phone lookup service is free and simple
- LinkedIn: 3 tips for building a better profile
- Lawmakers say Apple dodged billions in taxes
- Amy's Baking Company: Post-meltdown PR campaign
- Top 10 professional life coaching myths
- Yahoo buys blogging site Tumblr for $1.1 billion
- Seeking solutions to the student aid mess
SQL injection attack perhaps? There's no reason other than embarrassment not to release further details, because hackers know all the tricks already. Perhaps some public humiliation would help convince other companies' security teams to not do the same stupid things as you?
Just a thought.....
Hello People let me invest that for you, ok there we go, OOPS ITS GONE! LOL
If a law was passed that bank CEOs would be held personally accountable for security breaches you can bet they would then put needed emphasis on OUR data security.
They leak it and then it becomes our problem. It should become very costly to them when this happens and customers should receive thousands for their time and privacy exposure.