Citi failure is greater than just letting its data be breached