Citi Discloses Security Flaw in Its iPhone App
Citigroup Inc. (C) told its U.S. mobile banking customers they should upgrade to a new application designed for Apple Inc.’s (AAPL) iPhone after the bank’s original version was found to have a security flaw.
In an incident that highlights the growing security challenges around wireless apps, Citi said its iPhone app accidentally saved personal account information in a hidden file on users’ iPhones. Information that may have been stored includes their account numbers, bill payments and security access codes.
The information may also have been saved to a user’s computer if they synced their iPhone with a PC.
It wasn’t immediately clear whether the information was stored in an area that could have been accessed by a hacker, but Citi said it doesn’t believe the data was breached and said its new app corrects the problem.