Forum Views ()
Forum Replies ()
Read more with google mobile :
Exclusive: Citi skimps on standard customer monitoring
Paris Air Show
Airbus wins record $18 bllion order from AirAsia
AirAsia's Fernandes bets big on boyhood idea
Airbus sales chief dances to seal record plane order
Airlines in EU biofuels pact to cut pollution
China holds up Airbus order on EU CO2 row: report
Secretive VIPs splash the cash on customized jumbos
Boeing rights a wrong: the flight attendant button
Plane Price Calculator: Find out how much jet orders are worth
Video: Paris shows aviation innovation
Slideshow: The Paris Air Show
Data points to underlying factory strength
Angry Greeks say new taxes to hurt middle class, again
23 Jun 2011
Oil dives to 4-month low as emergency stocks unleashed
23 Jun 2011
Loss of Libya oil bigger disruption than Katrina: IEA
Asia moves to tap oil reserves
Biden deficit-cut talks hit impasse: Rep. Cantor
CBO sees government benefits swamping U.S. economy
Dutch court acquits Geert Wilders of hate speech
Hefner's revenge; Ryan Reynolds stops traffic
Fri, Jun 17 2011
Airbus A380 damaged at Paris Air Show
Mon, Jun 20 2011
Airbus' view of flying in the future
Mon, Jun 13 2011
Exclusive: Citi skimps on "standard" customer monitoring
Sega attacked, hacker group offers to take revenge
Sat, Jun 18 2011
Analysis: Cyber raids fuel calls for training, monitoring
Fri, Jun 17 2011
Analysis: Banks seek cybershelter with "ethical hackers"
Fri, Jun 17 2011
Citi says 360,000 accounts hacked in May cyber attack
Thu, Jun 16 2011
Special report: Government in cyber fight but can't keep up
Thu, Jun 16 2011
Analysis & Opinion
Amid global cybercrime, accidental hacks risk jail
Data breach overload: Is it time for a new law?
A man uses a Citibank automated teller machine at a branch in Washington January 19, 2010.
Credit: Reuters/Jim Young
By Maria Aspan and Ross Kerber
NEW YORK/BOSTON |
Fri Jun 24, 2011 8:06am EDT
NEW YORK/BOSTON (Reuters) - After a massive data breach last month, Citigroup did not offer its hacked clients the same degree of identity-theft protection that many other companies provide, drawing criticism from privacy advocates.
Citigroup, which had over 360,000 credit card accounts exposed last month, sent letters to affected customers this month with advice on protecting themselves against identity theft.
But unlike other large U.S. companies breached by cybercriminals, Citigroup did not offer to buy or give all affected customers a year of preventive credit file monitoring services, according to a sample of a letter the bank sent to many customers and filed with regulators in Maine.
A year of monitoring has become a standard offering from large companies after customer information is hacked, to reassure clients and to protect them from identity theft, privacy and consumer advocates said.
"Consumers might want to turn to Citibank and ask them to do more. It's become pretty commonplace to offer credit monitoring these days," Ruth Susswein, the deputy director of national priorities for Consumer Action, told Reuters.
"That's really the standard thing they can do," she said.
The bank did remind consumers they could place a fraud alert on their credit files, which tells lenders to contact consumers before allowing an account to be opened in their name.
Credit monitoring services typically do more, such as tracking consumers' credit reports for signs that their identities have been stolen, and giving them early warnings of the theft.
Citigroup's letter to clients offers special services to customers who believe their identities have been stolen. Bank spokesman Sean Kevelighan said that clients calling a hotline mentioned in the letter would automatically be offered services including at least six months of monitoring.
Hackers failed to steal social security numbers with the Citi data breach. Generally, when social security numbers have not been compromised, there is little risk of new account fraud, said Paul Stephens, director of policy and advocacy for the Privacy Rights Clearinghouse, a San Diego nonprofit that tracks breaches.
But the services are relatively cheap and the offers now seem to be the norm after most breaches, he added.
The bank, already facing regulatory pressure over its delayed disclosure of the breach, now faces additional criticism from the advocates who call its response stingy.
"Citigroup needs to take this recent breach more seriously than they have," said Marc Rotenberg, executive director of the Electronic Privacy Information Center.
Rotenberg, who testified this week before the U.S. Senate's banking committee on cybersecurity in the financial sector, told Reuters that companies generally could take additional steps like reducing the amount of personal data they keep on file.
Citigroup, the third-largest U.S. bank, included a sample of the letter it sent to holders of 703 accounts in Maine, in a filing with the office of state Attorney General William Schneider. Maine is one of a number of states that require organizations to report when personal data is compromised. Officials provided the letter to Reuters in response to an open records request.
In its letter Citigroup advises customers to "remain vigilant during the next 12 to 24 months by monitoring your account activity," and tells them that they can place "fraud alerts" on their credit files.
Kevelighan did not directly say why the bank has not made a broader offer of free credit monitoring to date.
He said the bank is "tracking a nearly 90 percent satisfaction rate with customers contacting us who have been specifically impacted by this," based on assessments by the customer service agents who handle their calls. He also reiterated that customers would not be liable for any unauthorized use of their Citi accounts.
Citigroup has said that its cyberattackers did not steal its customers' social security numbers or card security numbers and "none of the data breached was sufficient to perpetrate fraud."
Privacy and security experts said hackers could still find ways to use customer names, account numbers and email addresses to steal their identities.
"We still think the breach is quite serious," Rotenberg said.
Monitoring hasn't always been common. TJX Companies initially declined to offer the service after it disclosed a major data breach in 2007, but it eventually offered three years of monitoring for some customers as part of a settlement of a class-action lawsuit.
Now the offers are more standard. Other documents from Maine outline a host of other data breaches at dozens of companies, universities and other organizations. In several cases, companies mentioned they would offer free credit-monitoring as part of their response, such as when the RiverSource funds unit of Ameriprise Financial said a former employee failed to return electronic devices containing client names and Social Security numbers.
(Editing by Steve Orlofsky)
Related Quotes and News
We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see http://blogs.reuters.com/fulldisclosure/2010/09/27/toward-a-more-thoughtful-conversation-on-stories/
Good to know. They’re off my list of potential banks and credit card companies.
Jun 24, 2011 11:24am EDT -- Report as abuse
See All Comments »
Add Your Comment
Social Stream (What's this?)
© Copyright 2011 Thomson Reuters
Advertise With Us
Professional Products Support
About Thomson Reuters
Venture Capital Journal
International Financing Review
Project Finance International
Super Lawyers Attorney Rating Service
Reuters on Facebook
Thomson Reuters is the world's largest international multimedia news agency, providing investing news, world news, business news, technology news, headline news, small business news, news alerts, personal finance, stock market, and mutual funds information available on Reuters.com, video, mobile, and interactive television platforms. Thomson Reuters journalists are subject to an Editorial Handbook which requires fair presentation and disclosure of relevant interests.
NYSE and AMEX quotes delayed by at least 20 minutes. Nasdaq delayed by at least 15 minutes. For a complete list of exchanges and delays, please click here.
Other News on Friday, 24 June 2011
Iraq blasts kill at least 23, scores wounded
In Damascus, calm at the eye of the storm
Riggleman out in Washington; Nats skipper quits after team didn't sign option
Bank of America project will install rooftop solar panels to provide 733 megawatts of power
Cyprus bans all sailings to Gaza ahead of flotilla plan
Indonesia to stop sending workers to Saudi Arabia after maids beheading
Rain halts play at Travelers Championship with Michael Bradley out in front
Senegal's Wade withdraws poll bill as protests rage
"Glee" star Cory Monteith reveals drug abuse past
Half of Americans suffering while rich prosper
Philippine terminal operator launches logistics facility at Oregon port
U.S. draft requests 4,200 Ethiopia troops for Abyei
Virginia man charged for shooting at Pentagon, military buildings
Philips stocks drop after company warns to expect lower Q1 profits
Turkey's Kurds threaten to boycott parliament
Henrik Stenson shoots damp 64, holds lead at BMW International
Gbagbo, Ouattara forces engaged in war crimes: ICC
Oracle software sales beat its forecast
Apple gets antitrust approval for Nortel asset buy
Viacom sues Cablevision over iPad streaming
GPS worry prompts call for more LightSquared tests
Netflix CEO Hastings joins Facebook board
FTC to deepen Google probe: report
Hacker pleads guilty over AT&T-iPad breach
Glee star Cory Monteith was teen drug addict
Bristol Palin talks pregnancy, McCain in memoir
Diddy settles civil lawsuit over NY club shooting
Lady Gaga, on charity trip, urges visits to Japan
Transformers holds world premiere in Moscow
NATO chief says alliance will finish job in Libya
U.S. concerned at Syria border moves, fears escalation
No interviews, Twitter, travel for Chinese artist Ai: source
Phone gives clues to bin Laden's Pakistan links: report
Djokovic, Federer on course for semis clash; Serena wins, raises "sexism" issue
Ricky Stenhouse Jr. atop Nationwide points
Mexican president apologizes to drug war victims
Carl Edwards enjoys ninth straight week atop Cup standings
Joe Gibbs Racing hit with $150K in fines for Michigan missteps
Kurt Rambis ousted as T-Wolves coach; move to follow NBA Draft
Jailed American awaits Cuban court decision
NHL schedule unveiled for 2011-12, Bruins-Flyers open campaign
International flavor to top 10 picks in NBA Draft; Turkey, Lithuania represented
U.S. places economic sanctions on Iran Air
Teen Mom Amber Portwood Heads to Rehab
Yani Tseng off and running with 66 at LPGA Championship
Apple files patent suit against Samsung in South Korea
Winklevoss twins push another suit against Facebook
Exclusive: Forget Spy Kids, try kiddie hacker conference
Google at the center of antitrust probes
Hackers break into Arizona police computers
NATO says one of its websites probably hacked
Michelle Obama meets Oprah in South Africa
Rapper Missy Elliott says she has thyroid disease
St. Louis statue of Chuck Berry sparks opposition
Reluctant heiress leaves million to arts, nurse
After decades of war, Sudan's Abyei defies quick fixes
Explosions rock Myanmar's capital, two other towns
Clinton defends 'frustrating' U.S.-Pakistan relations
Afghanistan says 4 children killed in Pakistani border shelling
Critics say "Cars 2" is Pixar's most "Rotten" movie yet
Ex-Ukraine PM accuses Yanukovich of mock trial
Hugh Hefner calls new 25-year-old playmate his "best girl"
Initial jobless claims stuck above 400,000 for 11th week
Yemenis pray for political impasse end
Ex-Southern Cal football player and LA Times Reporter admits to taking $14K in illegal money
G20 not biting off more than they can chew
Palestinians use bulldozer to ram Israeli fence
Lost 1969 moon dust saved from auction block
Zucchinni Weeni, Fried Kool-Aid new treats at county fairs
Pakistan, India to explore new nuclear confidence building
Botox for excessive sweating may interfere with texting.
Fiat 500 given 'coolest' car title
Thai PM's speech boosts ruling party's election chances
KKR, Silver Lake in talks for GoDaddy.com: sources
Nortel patent sale attracts tech giants
Exclusive: Citi skimps on standard customer monitoring
Slow Finnish phone sales may explain Nokia's woes
Hackers target Brazil statistics agency website
Judge bans parties while Lindsay Lohan on house arrest
U2 face nerves, protests ahead of Glastonbury debut
Greece at new risk of being pushed off euro
Bodies of missing Tenn. mom, Jo Ann Bain, and daughter found
Female Breasts Are Bigger Than Ever
AMD Trinity Accelerated Processing Units Now in Volume Production
The Avengers (2012 film), made the second biggest opening- and single-day gross of all-time
AMD to Start Production of piledriver
Ivy Bridge Quad-Core, Four-Thread Desktop CPUs
Islamists Protest Lady Gaga's Concert in Indonesia
Japan Successfully Broadcasts an 8K Signal Over the Air
ECB boosts loans to 1 trillion Euro to stop credit crunch
Egypt : Mohammed Morsi won with 52 percent
What do you call 100,000 Frenchmen with their hands up
AMD Launches AMD Embedded R-Series APU Platform
Fed Should not Ignore Emerging Market Crisis
Fed casts shadow over India, emerging markets
Why are Chinese tourists so rude? A few insights