UnknownFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMedium

Frost Bank

bd_b213ce708cd456a5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 20, 2026

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

64%

Full breach record for Frost Bank →

Frost Bank reported a data security breach to the California Attorney General. The incident occurred on December 6, 2025. The notice template indicates that personal information, including identity and financial data, was potentially compromised. Affected individuals are offered credit monitoring services. Specific details regarding the nature of the breach, the number of affected individuals, and the discovery date are not provided in the available filing summary or the generic notice template.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 6, 2025

Begins

May 20, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteeverestbd_5a86e8b29efb82bf2026-04-20 · +30dVerified

Regulatory filings (4) · sorted by filing gap

Texas State AGbd_5f4aac65b3dc3f392026-05-20Verified
Massachusetts State AGbd_8b776d1a699a96f92026-05-20Verified
Vermont State AGbd_9bc98c2af470155e2026-05-20Verified
Montana State AGbd_57500bb26b4174d52026-05-19 · +1dCandidate

Name: Frost Bank
norm: frost bank
Domain: frostbank.com

Name: Frost Bank
norm: frost bank
Domain: frostbank.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Dec 6, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unknown

During the incident: Offering credit monitoring services at no charge
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGMay 19 · first

Texas State AG+1d

Massachusetts State AG+1d

Vermont State AG+1d

California State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-623688
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 20, 2026
Raw hash: 8176c132143cf8f42f69df441c120d342843a1c661f197952d3f067b47b5d2c8

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityFrost Bank

Victim entityFrost Bank

IncidentUnknown

Stated responseOffering credit monitoring services at no charge

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov