The fallout continues from the May 10 breach of Citi’s credit card account files by hackers. The bank now says that a total of around $2.7 million was stolen from a relatively small percentage of the 360,000 breached accounts.

According to CNN, that $2.7 million only came from around 3,400 accounts, less than 1% of all those that were affected by the hack.

“Customers are not liable for any fraud on the accounts and are 100% protected,” the bank said.

Who knows if this will be the final word on the May 10 incident, which wasn’t made public until early June. At that time, the bank announced that 200,000 accounts had been impacted by the attack. That number was later increased to 360,000.

Citi has taken heat from critics both for waiting weeks before notifying affected customers and for the ease with which its system was breached.

Citi: Millions stolen in May hack attack [CNN]

Want more consumer news? Visit our parent organization, Consumer Reports, for the latest on scams, recalls, and other consumer issues.