Citigroup could learn a lesson from Anthony Weiner: if you mess up, admit the whole truth as soon as possible. Instead, the bank is again facing harsh criticism over a hack attack that exposed customers’ credit-card info. First, the bank didn't acknowledge the leak for three weeks; then it said only about 200,000 accounts were affected. But in a statement late Wednesday, Citi said the real figure was more than 360,000. That’s still a small fraction of the approximately 23.5 million credit-card accounts the company has in North America. Citi says that hackers didn’t get enough information to actually use the cards for fraud.