Frost Bank

Frost Bank operates as a financial institution headquartered in the United States. It provides banking services, including commercial lockbox processing for business customers. This service involves receiving mailed payments on behalf of commercial clients and electronically processing the accompanying checks. The bank serves commercial entities across markets utilizing its lockbox facilities.

A notable incident occurred on March 16, 2018, impacting Frost Bank's commercial lockbox operations. Unauthorized access was gained to digital images stored within commercial customers' lockbox archives due to a vulnerability in a third-party software program. Attackers exploited this flaw to view and copy electronically stored check images. The breach was discovered during an internal investigation, prompting immediate action to halt unauthorized access. Frost Bank engaged a cybersecurity firm for assistance and cooperated with law enforcement. Impact was confined to the commercial lockbox systems, with no compromise reported to other banking platforms. Affected commercial customers, including the City of Corpus Christi which used three accounts for payment processing, were notified. These customers were advised to monitor their accounts for suspicious activity, particularly those mailing payments to specific Frost Bank lockbox addresses associated with the breach.