“About 117,600 customers who downloaded the app since March 2009 had their account numbers and security access codes saved to a hidden file on their smartphone or music player, the Wall Street Journal reported. Those who synced their iPhone with their home computer might have also unintentionally saved the sensitive information there.

The new version of the app, released July 19, does not stow users’ banking info and deletes previously stored baking info.

Citi does not believe that criminals exploited the security flaw, which was revealed in a routine security review, and that clients should be unaffected, “

(Source: Citi Alerts Customers to Security Flaw with iPhone Banking App | App Security Problems | TechNewsDaily)