Citigroup says 360,000 accounts hacked