The Wall Street Journal reports that financial behemoth Citigroup today revealed that a security flaw had been discovered in its Citi Mobile application for the iOS platform, a flaw that was patched in an update to the application released last week.
In an incident that highlights the growing security challenges around wireless apps, Citi said its iPhone app accidentally saved personal account information in a hidden file on users' iPhones. Information that may have been stored includes their account numbers, bill payments and security access codes.
The information may also have been saved to a user's computer if they synced their iPhone with a PC.
The application has seen three other revisions since its March 2009 introduction, and it is unclear whether the security issue has been present in all versions or if it was introduced sometime after the initial release.