Frost Bank data breach
Frost Bank officially reported a data breach to California regulators on May 20, 2026, which occurred on December 6, 2025. This incident potentially exposed customers' Full Name, Social Security Number, Financial Account Number, and other sensitive financial details. Affected individuals face an increased risk of identity theft and financial fraud, prompting a review of their legal options.
Docket sheet
- Company
- Frost Bank
- Venue
- California Attorney General
- Filed
- May 20, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredDecember 6, 2025
Date of the incident as stated in the filing.
- 2
Reported to the California Attorney GeneralMay 20, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Financial Account Number
- Routing Number
- Date of Birth
- Credit Score Information
- Transaction History
- Mailing Address
Clerk's notes
Frost Bank formally notified California authorities on May 20, 2026, regarding a data security incident that originated on December 6, 2025. This filing indicates that an unauthorized party may have gained access to sensitive customer information maintained by the financial institution. The investigation into this breach is currently under 'monitoring' by regulators.
According to the official report, the categories of data potentially exposed include Full Name, Social Security Number, Financial Account Number, Routing Number, Date of Birth, Credit Score Information, Transaction History, and Mailing Address. The compromise of such comprehensive personal and financial identifiers creates a significant risk for affected individuals, potentially leading to identity theft, fraudulent transactions, or account takeover.
As a financial institution, Frost Bank is bound by stringent federal and state regulations, including the Gramm-Leach-Bliley Act, which mandate robust security protocols to protect nonpublic personal information. The occurrence of this data breach suggests potential deficiencies in the safeguards designed to prevent unauthorized access to customer data, making it crucial for affected individuals to understand their rights.
If you received a data breach notification letter from Frost Bank, it serves as formal acknowledgment that your private financial information was compromised while under their care. Receiving such a notification is an important step in establishing legal standing to explore potential claims. Our firm is actively reviewing cases related to this incident.
We encourage anyone affected by the Frost Bank data breach to consider their options. Understanding the full impact and your legal avenues is important. You can request a free case review to determine how this breach may affect you and what steps you can take.
If a notification letter about this breach reached you, see every California data breach on file or browse all cases.
Other California docket entries
- ZZ Diag ProbeCalifornia AG—Monitoring
- STS Aviation GroupCalifornia AGOctober 19, 2026Monitoring
- Citizens BankCalifornia AGOctober 19, 2026Monitoring
- John G. Yphantides, a Professional Law CorporationCA AGOctober 16, 2026Monitoring
- Neuro Wellness SpaCalifornia AGOctober 16, 2026Monitoring
- Frazer LLPCalifornia AGOctober 16, 2026Monitoring
- Covered CaliforniaCalifornia AGOctober 16, 2026Monitoring
- Inner City Education FoundationCA AGOctober 16, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.