Consumer complaint received 2025-04-23 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Incorrect information on your report — Information belongs to someone else
Company: CITIBANK, N.A.
State: NV

Complaint narrative:
15 U.S. Code $ 1681c-2 a consumer reporting agency shall block the reporting of any information in the file of a consumer that the consumer identifies as information that resulted from an alleged identity theft, not later than XXXX business days after the date of receipt. 
It has been XXXX days and you are in VIOLATION of this law because I am a victim of identity theft!! Please delete these items IMMEDIATELY! 
These accounts should not be furnished on my consumer report as they are in VIOLATION!!!

Under, 15 U.S Code 1681b - Permissible purposes of consumer reports ( a ) IN GENERAL Subject to subsection ( c ) any consumer reporting agency may furnish a consumer report under the following circumstances and no other : ( XXXX ) In accordance with the WRITTEN INSTRUCTION of the consumer to whom it relates. I NEVER gave any consumer reporting agency WRITTEN CONSENT to report anything on my consumer report which violates my rights as a federal protected consumer. NO CONSENT IS IDENTITY THEFT. As a consumer I am demanding the deletion of the accounts listed IMMEDIATELY! 

I am writing to formally dispute and bring to your attention a serious concern regarding a potential or confirmed data breach involving my personal information. It has come to my attention that my sensitive data may have been compromised because of inadequate data security measures on your part. 

Under federal and state consumer protection laws, including but not limited to the Fair Credit Reporting Act ( FCRA ), the Gramm-Leach-Bliley Act ( GLBA ), and applicable state data breach notification laws, companies are required to implement and maintain reasonable security procedures to protect consumers personal information and to promptly notify them in the event of a breach. 

I believe your company has failed to uphold these responsibilities, resulting in potential harm to my financial and personal privacy. If this breach has resulted in fraudulent activity on my credit file, financial accounts, or otherwise, I am requesting that you immediately : Provide a detailed account of the data that was compromised ; Disclose the date and method by which the breach occurred ; Explain the steps your organization is taking to remediate the situation ; Provide documentation of your compliance with data protection laws ; Correct any errors on my credit file caused by this breach ; Provide complimentary credit monitoring and identity theft protection services for a minimum of 12 months. 

Please be advised that I am aware of my rights under the FCRA ( 15 U.S.C. 1681 ), which allows me to dispute inaccurate or incomplete information on my credit report. You are required to investigate and respond to this dispute within 30 days of receipt. Failure to do so may result in a complaint filed with the Federal Trade Commission ( FTC ), the Consumer Financial Protection Bureau ( CFPB ), and/or my states Attorney General. 

Please respond to this dispute in writing within 30 days. If you fail to respond or resolve this issue promptly, I reserve the right to pursue further legal action.

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with non-monetary relief