I just went back and checked my Citi card going back to July and it seems to be fine (although mine is limited to Supermarkets and Telecoms only in use). My primary card is my US Chase CSR (used with CX and BA) and I haven't seen any issues there yet. Are we sure that the leak is from Citi and not from one of the vendors?