Now, I'm worried.

It's the OP's last four digits that concerns me as it suggests a security breach somewhere, likely at Citi. And when these things happen they often involve theft of info in millions of accounts.

Anyone else gotten such and email with the last four digits of their card number?