Still happening.

Received a new Citi AA Mastercard today with a different account number.

A note inside says, "Citi Cards has learned that your account number as indicated on the attached card carrier may have been compromised/stolen from an outside party and could be at risk for unauthorized use."

Also, they will close the account if the new card is not activated.