Be Sure To Update Citi iPhone App To Delete Sensitive Info

It looks like Citi doesn’t just do a crappy job of protecting customer info in the mail. The bank admitted yesterday that its Citi Mobile iPhone app was storing sensitive data in a hidden file on users’ phones and possibly their computers.

Among the data included in this file are account numbers, access codes and bill payments. According to Citi, users who hooked up their iPhones to computers might have also unwittingly copied that info to the PC.

The bank claims that no one’s data has been breached, but that users should update to the latest version available now from the App Store. This should delete the file from your device.

Citi’s iPhone mobile banking app puts customers’ account information at risk [NY Daily News]

Comments

Edit Your Comment

  1. Reading Rainbow says:

    Does this update also delete the files on the PC? Shouldn’t they also be stating to update the device and then hook it up to whatever PC it’s been previously connected to?

    • NeverLetMeDown says:

      They do say that. Update the app and then sync with iTunes.

      • Reading Rainbow says:

        Ah that’s what I get for not RTFA. Usually I don’t check them out while at work – thanks for the correction

  2. marlathetourist says:

    Imagine that texting to pay bills, transfer money, deposit checks, ect.. Is not working out so well for Citi Bank. Everytime I see one of their commericals I cringe. Tattooing your social security number on your forehead might be a better idea.

  3. ben_marko says:

    Um…wow.

    Another helmet fire, courtesy of Consumerist. Keep in mind that the information was stored on personal iPhones, personal computers. Both should logically be password or passcode protected. Pretty impossible to access that sensitive information without wiping or even damaging the iPhone and/or Mac. Most people who own personal computers do in fact keep sensitive information on it (including financial information), so if the iPhone and/or Mac wasn’t protected from unauthorized access in some way, then bad on the owner.

    Citi admitted fault and took corrective action, good on them. Consumerist says the sky is falling, blames Citi for doing a “crappy job.”

    Please, Chris, this isn’t journalism, it’s exaggeration. Granted, Citi has had it’s share of bad mistakes before, but this isn’t one of them. You do a disservice to Consumerist readers by making this look like something it is not.