Tagger
06-10-2011, 01:39 PM
CitiGroup hacked, account information of 200,000 customers stolen
(http://www.geek.com/articles/news/citigroup-hacked-account-information-of-200000-customers-stolen-2011069/)
2011 is rapidly turning into the year of the high-profile data breach — and while yet another Sony website was compromised, it’s Citigroup which is making headlines this morning. According to a report filed by Reuters, personal information on more than 200,000 Citi customers was stolen, including their names, account numbers, and email addresses. Citi was quick to point out that other more sensitive data like CVV codes and social security numbers were not taken.
In typical corporate disaster-control spin mode, one Citi official reminded that the total number affected represents only one percent of the company’s customer base (estimated at around 21 million). The numbers, of course, aren’t what’s important here anyway — it’s the fact that a major financial institution was successfully infiltrated and personal, confidential data was extracted. Period.
Citi spokesman Sean Kevelighan also stated that “For the security of these customers, [Citi is] not disclosing further details.” I’m not certain, however, that it’s in the best interest of those customers to wait nearly a month before attempting to contact those customers to inform them of said security issues.
While the heist took place in early May, Citi has only now begun getting in touch with those who were victimized. Sony was heavily criticized for not fessing up more quickly, and Citi deserves to be called out as well. Let’s hope new legislation such as the Cyber Security Awareness Act of 2011 will help push companies to notify the public in a more timely fashion.
Though it would certainly be a welcome change to see companies being a little more upfront about security breaches, it’d be even nicer to read about hacking attempts being thwarted instead. Maybe tomorrow.
(http://www.geek.com/articles/news/citigroup-hacked-account-information-of-200000-customers-stolen-2011069/)
2011 is rapidly turning into the year of the high-profile data breach — and while yet another Sony website was compromised, it’s Citigroup which is making headlines this morning. According to a report filed by Reuters, personal information on more than 200,000 Citi customers was stolen, including their names, account numbers, and email addresses. Citi was quick to point out that other more sensitive data like CVV codes and social security numbers were not taken.
In typical corporate disaster-control spin mode, one Citi official reminded that the total number affected represents only one percent of the company’s customer base (estimated at around 21 million). The numbers, of course, aren’t what’s important here anyway — it’s the fact that a major financial institution was successfully infiltrated and personal, confidential data was extracted. Period.
Citi spokesman Sean Kevelighan also stated that “For the security of these customers, [Citi is] not disclosing further details.” I’m not certain, however, that it’s in the best interest of those customers to wait nearly a month before attempting to contact those customers to inform them of said security issues.
While the heist took place in early May, Citi has only now begun getting in touch with those who were victimized. Sony was heavily criticized for not fessing up more quickly, and Citi deserves to be called out as well. Let’s hope new legislation such as the Cyber Security Awareness Act of 2011 will help push companies to notify the public in a more timely fashion.
Though it would certainly be a welcome change to see companies being a little more upfront about security breaches, it’d be even nicer to read about hacking attempts being thwarted instead. Maybe tomorrow.