Citi Credit Card Customer Data Breached

June 16, 2011

AUGUSTA ? Attorney General William J. Schneider alerts credit card customers of Citibank N.A. (Citi) that a recent breach of security resulted in the unauthorized access to personal information of at least 703 Maine Citi credit card customer accounts.

According to Citi, the breach was discovered during routine monitoring on May 10 and involved unauthorized third party access to customer names, credit card account numbers and personal contact information including email addresses. The third party did not gain access to any customer?s social security number, date of birth, credit card expiration date or credit card security code (CVV).

Citi began notifying customers of the breach on June 3 by letter sent via U.S. mail and/or through a notice displayed online when a customer logs into a specific Citi credit card account. Citi will not be notifying their affected customers by telephone or email. In addition, Citi will reissue credit cards to potentially impacted customers.

?This breach is a direct threat to the confidentiality and security of the private information of Citi?s Maine credit card customers,? says Schneider. ?Credit card users should review their account activity frequently and be aware that legitimate communication from Citi will not occur by a phone call or random email.?

In addition, Attorney General Schneider reminds residents of Maine that having their information in the hands of an unauthorized person does not necessarily mean that they have become a victim of identity theft. Identity theft does not occur until an unauthorized person fraudulently uses that information to secure money, goods or services in another person?s name.

A security freeze or ?file freeze? may be placed on an individual?s credit report as added protection against identity theft. With a freeze in place, the credit reporting agency may not release a credit report without the individual?s authorization. To place a security freeze on your credit file you must send a written request to the three major credit reporting agencies. The security freeze is provided at no charge to consumers who have been victims of identity theft.

Maine?s file freeze law is found at the following link:

http://www.mainelegislature.org/legis/statutes/10/title10sec1313-C.html

Consumers who are concerned about data breaches may contact the Maine Office of the Attorney General Consumer Protection Division at 626-8800.

National credit reporting agency contact information is as follows:

Equifax PO Box 740241 Atlanta, GA 30374-0241 1-800-685-1111 For security freezes call 800-525-6285 http://www.equifax.com/answers/help/security-freeze/en_cp

Experian PO Box 2104 Allen, TX 75013-0949 1-888-397-3742 For security freezes call 888-397-3742 http://experian.com/consumer/security_freeze.html

Trans Union PO Box 1000 Chester, PA 19022 1-800-916-8800 For security freezes call 800-680-7289 http://transunion.com/corporate/personal/fraudIdentityTheft/fraudPrevention/securityFreeze.page

CONTACT: Brenda Kielty (207) 626-8577