[Centurion2000]

In a brief statement, Citibank said that the fraud was the result of a “third-party business information breach” that took place last year. To protect its customers, the company said it “blocked PIN-based transactions in those locations for the customers affected by the breach." A spokesman for the company, however, refused to name the third-party retailer involved in the breach.

Something's not right here considering that the retailer MUST disclose things like this under PCI and VISA-CISP regulations.

[torquinus]

To Visa/MasterCard: Maybe it's time to implement EMV in the US? Card Authentication (DDA plese) by chip and Cardholder Verification Methods (CVM=offline PIN), where have I heard those....that would eliminate lost/duplicate/stolen to 0. been done already...