Citigroup says hackers accessed credit card data