Citigroup latest to report data breach