The hackers were able to view customer names, their account numbers and contact information including email addresses. They weren't able to gain access to social security numbers, birth dates, card expiry dates or card security codes.
Spokesman Sean Kevelighan said in an emailed statement that Citi is contacting customers who were affected and is putting in procedures to prevent it happening again.
The breach was first reported by the Financial Times.
