CSIDB logo
Organisation

Frost National Bank

Profile

Primary URL
frostbank[.]com
Location
United States of America
Sector
Financial Services
Known incidents
2 incidents
Updated
2026-09-11 08:43
Aliases
2 aliases

Organisation tracking is available to eligible accounts.

Profile narrative

Frost Bank, also known as Frost National Bank, is a financial institution headquartered in the United States of America. As a bank it provides a range of traditional banking services to both individual and commercial customers, including the handling of personal financial information and the administration of tax‑related records such as W‑2 forms, 1099s and HSA contributions. The institution also operates commercial lockbox services that process payments and store check images for business clients. These activities are reflected in the types of data that were exposed in the security incidents the organization has experienced.

The scale of Frost Bank’s customer base can be inferred from the impact of its 2026 data breach, which exposed personal and tax‑related information of over 250,000 individuals. This figure indicates that the bank serves a substantial number of retail clients in addition to its commercial lockbox clientele. The 2018 breach specifically affected commercial lockbox systems, showing that the bank’s services extend to municipal and corporate entities that rely on its payment processing capabilities. While no explicit employee count or asset size is provided, the breach disclosures suggest a notable presence in both the retail and commercial banking sectors.

Distinguishing attributes of Frost Bank include its specialization in managing sensitive tax and payroll data, as evidenced by the mortgage interest records, W‑2 forms, 1099s and HSA contributions that were compromised in the 2026 incident. Its lockbox offering for commercial customers highlights a focus on facilitating business payment flows and safeguarding check images, a service that required immediate remediation after the 2018 software vulnerability was exploited. As a nationally chartered bank, Frost Bank operates under the regulatory framework of U.S. federal banking authorities, which imposes standards on data protection, risk management and consumer safeguards that are relevant to the incidents described.

Structurally, Frost Bank is identified as a national bank, indicating that it is chartered and supervised by the Office of the Comptroller of the Currency or an equivalent federal banking regulator. The prompt does not disclose details about parent companies, subsidiaries or ownership arrangements, so no further structural information can be stated. The organization’s public profile is therefore defined by its banking functions, its service to personal and commercial clients, its involvement in lockbox and tax‑related data handling, and its status as a U.S.‑based national bank.

Incidents

2 incidents linked to this organisation.

CSIDB