Citibank apologizes after exposing 600,000 Social Security numbers