(Reuters) - Citigroup will replace all customer debit cards involved in the data breach at Target Corp, the No.3 U.S. retailer, the New York Times reported quoting a person briefed on the bank's decision.