Citibank data breach

Clerk's notes

On April 15, 2026, Citibank officially notified the Massachusetts Attorney General's office about a data breach. This filing confirms a security incident affecting customer information, which is presently under active investigation.

As a prominent financial services corporation, Citibank handles a vast amount of personal information daily. A breach of this nature indicates that your data may have been exposed, potentially leading to risks such as unauthorized account access or other forms of identity-related issues.

Financial institutions like Citibank are legally obligated to safeguard customer data under federal regulations, including the Gramm-Leach-Bliley Act, and Massachusetts state statutes. These laws require robust security measures to prevent unauthorized disclosure, and an incident of this type suggests that those protective controls may have been compromised.

If you have received a data breach notification letter directly from Citibank, this serves as formal acknowledgment that your personal information was involved in this security event. Receiving such a letter establishes your standing to inquire further and to understand your legal options.

We advise individuals who have received a notification to monitor their accounts for any unusual activity. For a procedural review of your specific situation and to understand what legal recourse may be available, you can request a free case review.

If a notification letter about this breach reached you, see every Massachusetts data breach on file or browse all cases.