Citigroup said Monday that personal information on 3.9 million consumer lending customers of its CitiFinancial subsidiary was lost by UPS while in transit to a credit bureau — the biggest breach of customer or employee data reported so far.
Citigroup, the nation’s biggest financial services company, said that UPS lost the tapes while shipping them to a credit bureau in Texas.
“We deeply regret this incident, which occurred in spite of the enhanced security procedures we require of our couriers,” Kevin Kessinger, executive vice president of Citigroup (Research), said in a statement. “Beginning in July, this data will be sent electronically in encrypted form,” said Kessinger, who heads the company’s consumer finance business in North America.
In its letter, New York-based Citigroup told the people affected there was “little risk of your account being compromised because you have already received your loan.”