Citibank may lock bank accounts for 45 days if breach suspected