Which says, "The US bank on Wednesday revealed details of the breach...
And MarketPlace.com is similarly unforthcoming: "Citi reportedly said it discovered the breach in early May, and that it had affected about 1% of its card customers, according to a report in the Financial Times, citing a Citi statement." Link: