Citi Waited Three Weeks To Tell Customers Of Online Data Hack

Wall Street Journal:

Citigroup Inc. waited as long as three weeks to notify credit-card customers of a hacking attack because it was conducting an investigation and producing replacement cards, according to a person familiar with the situation.

The internal investigation took 10 to 12 days and began within 24 hours of the discovery by Citigroup officials in early May that the New York bank's systems had been breached, this person said. In some cases, Citigroup took action to protect accounts considered vulnerable to fraud.

Read the whole story: Wall Street Journal

Comments

[apathyman]

10:29 AM on 06/14/2011

What they really mean is that Citi was making sure it's @ss was covered before they let anyone know what happened

[Sanye]

12:15 AM on 06/14/2011

(Part 3)
Five days passed, did I get any notice ? No ! Did i get my statement to review my charges ? Nope. What did i get? A new Citi Card ! ! !
What suprises me that this hasn't been a big news. I hardly find any news, development information online or on TV. It is like nothing happened ! Why bother, why make the share holders make nervous. ?Just be quiet and cover up. I only hope the people who are victim like me speak up and make some noise. Why ? That is the only way to change things ! Then they put some money to have tighter security and "update" their system and might start to care (or pretend to care) about their customers.

[Sanye]

12:15 AM on 06/14/2011

(Part 2)
I was stunned by their insensitivness. They acted like this is just another random stolen credit card(although at that time they knew that the accounts have been hacked) They just ignored all my questions, frustration and told me that I won't be responsible. So this is what they do. Don't worry , don't question just shut up ! That wasn't the point for me. I spent all of the next day by driving myself crazy to figure out how could this happen, calling the credit bureaus, putting an alert, filing a police report etc. Next day, at night I saw a tiny little news at the side bar of my computer screen about Citi Card's accounts being hacked ! I immediately called the Citi and asked them how come they never mentioned to me a day before. They were deaf again and hadn't acknowledged that their system was hacked and my account was one of them. Again the answer was "well ... do not worry, blah blah blah " None of Citi Card reps that I spoke ever mentioned that their system was hacked. (to be continued...)

[Sanye]

12:13 AM on 06/14/2011

I am one of them ! Sorry this will be long but I need to vent !
These charges have been happening since the last statement, I wasn't aware. On June 8th, I got a call from CitiCard informing that there is a suspicious activity to my account. Someone tried to buy $3500 worth of electronics from a semiconductor company ! Thanks to the company they haven't charged and that's why CitiCArd was calling me. I was in shock. I told them I didn't lose my card and I don't use my card online as a matter of fact I don't use my card a lot. When I "pulled" some information from the rep. mouth, I understood that not only one but there were many "suspicious" activities in last three weeks. such as a charge ($4500) from a computer seller, which was first charged by the company but then the company cancelled.This happened on May 17 and wasn't considered "suspicious" by Citi Card !! There were many charges like this and none of them triggered any red flag ! (did i tell you I rarely use my credit card) When I asked how come I never notified at the first incident, answer was "well, ..blah blah, blah." . I asked the rep.to e-mail me my statement that I can see what is going on, "well, we can't do that, you have to wait until you receive the statement " . (to be continued...)

[BonnieDoon]

08:15 PM on 06/13/2011

Typical behavior for Citi - CYA - same as with their fraudclosure servicing subsidiary.

[sfizi]

04:44 PM on 06/13/2011

Probably sold the information ...

[nobodysgirl]

04:00 PM on 06/13/2011

So this means they're going to provide funds and services for those people who do have their information used?

You know - that 'accountability' word?

[the964kid]

03:54 PM on 06/13/2011

At this point, anybody still at Citi more or less deserves to read stories like this.

[calblue61]

01:14 PM on 06/13/2011

when some one's credit card info gets hacked and money stolen...who is responsible, the bank or the person who's account is broken into?

[stargazer13]

12:12 PM on 06/13/2011

customers who cares about them !!

we got our bonus money and that is all that matters

[danusgram]

11:46 AM on 06/13/2011

bring the jobs home from India signed those that bailed you out Citi

[fineartgalaxy]

11:05 AM on 06/13/2011

There is no hacker. They sold the information and now they blame it on a hacker.

[okiedemocrat]

10:36 AM on 06/13/2011

They had to make sure their millionaire execs' accounts weren't affected.