Citigroup (NYSE: C) can't seem to catch a break when it comes to securing its data. About two months after its credit card database was breached this spring, data from its credit card division in Japan has been exposed, reports Chris Preimesberger at eWeek.

Citi Cards notified users Aug. 5 that "certain personal information of about 92,400 customers has allegedly been obtained and sold to a third party illegally." The data was not leaked via an online attack, however. Citigroup reported to police that someone involved with one of its outsourcing companies had gotten a hold of the data illegally and sold it, Preimesberger writes.

The stolen data includes names, addresses, phone numbers, birth dates, account numbers and more, but the company said that personal ID numbers and security codes were not exposed.

Citigroup customers were notified June 15 that a credit card database had been hacked into, compromising 360,083 accounts. In May, hackers broke in and took $2.7 million from approximately 3,400 customers.

For more:
- see Chris Preimesberger's article at eWeek

Related Articles:
Citigroup breached by simply altering URL; now admits 360k accounts hacked
Banks replace SecurID tokens
Honda hit with class action lawsuit after data breach