By Dan Ilett, 7 June 2005 11:35
NEWS
Citigroup is apologising to 3.9 million customers for losing their personal data.
The banking firm has written to customers whose information was stored on computer tapes that were lost last month by courier UPS in transit to a credit office.
Kevin Kessinger, Citigroup's president of consumer finance in North America, said: "We deeply regret this incident, which occurred in spite of the enhanced security procedures we require of our couriers.
"There is little risk of the accounts being compromised because customers have already received their loans, and no additional credit may be obtained from CitiFinancial without prior approval of our customers, either by initiating a new application or by providing positive proof of identification. Beginning in July, this data will be sent electronically in encrypted form."
The tapes contained US customer data from CitiFinancial branch network operations and CitiFinancial Retail Services. The company said the tapes did not contain information from CitiFinancial Auto, CitiFinancial Mortgage or any other Citigroup business.
The company also believes the data has not been compromised and that none of the tapes contained details of CitiFinancial network customers in Canada or Puerto Rico.
"We are making every effort to ensure that our customers are aware of what we are doing and what we suggest they do to protect their identity. We are committed to ensuring that our customers have the support they need to monitor their credit and know how to respond should they identify any problems," added Kessinger.
Last week, the Japanese arm of investment firm UBS apologised for losing a hard disk that contained confidential data of 15,500 customers.
Comments
There are 2 comments. Join the discussion
1. anonymous
Citigroup clearly has a problem with data and it is not just when it is in transit. I have never had an account of any sort with Citigroup, yet suddenly started getting statements from them saying I had a credit card with a balance of just over £1 (and no credit limit). This was clearly a mistake, but they refused to speak to me because my dob was not the same as they held.
So month after month my non existent account produces a statement.
Data control is clearly a problem.
2. anonymous
UK ID card data will no doubt suffer the same fate. Also known as outsourcing the data.