Citibank N.A.

Citibank, N.A. notified the New Hampshire Attorney General on April 11, 2017, regarding an incident affecting three New Hampshire residents. On approximately March 27, 2017, a Citi employee accidentally included an external email address in a legitimate email distribution list. The email contained customer names, addresses, and credit card account numbers. The unintended recipient deleted the email without opening it. Citi closed the affected accounts, reissued new credit cards, and offered 12 months of complimentary credit monitoring. The company assessed little risk of misuse.