I haven't seen Citi mentioned in anything I've read yet, I received an email from them a little while ago:
Dear [Flyers2391],
Recently, Citi was notified of a system breach at Epsilon, a third-party vendor that provides marketing services to a number of companies, including Citi. The information obtained was limited to the customer name and email address of some credit card customers. No account information or other information was compromised and therefore there is no reason to re-issue a new card.
Because e-mail addresses can be used for "phishing" attacks, we want to remind our customers of the following:
* Citi Cards uses an Email Security Zone in all of our email to help you recognize that the email was sent by us. Customers should check the Email Security Zone to verify that the email you received is from CIti and reduce the risk of personal information being "phished". To help you recognize that the email was sent by Citi we will always include the following in the Email Security Zone in the top headline portion of all our emails:
o Your first name and last name
o Last four digits of your Citi card account number
o And recently to increase security, we have added your “member since” date located on the front of your card, where available.
* ThankYou(SM) Rewards always includes your first name, last name, last four digits of your ThankYou Member ID, and Total Available Point Balance in the top headline portion of all our emails to help you recognize that the email was sent by us. Customers should check the top portion to verify that the email they have received is from ThankYou(SM) Rewards and reduce the risk of personal information being "phished".
* More information about phishing is available here: [link]
