Cullen/Frost Bankers
Disclosed Mar 26, 20266 months ago4,698 affectedConfirmed
The covered entity (CE), Cullen/Frost Bankers, Inc., reported that it was notified by its business associate (BA) that the BA experienced a breach of its network that affected the protected health information (PHI) of 4,698 individuals. The PHI involved names, dates of birth, social security numbers, and other identifiers. The CE notified HHS, the media, and the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 4,698 (as reported to HHS) |
|---|---|
| Disclosed | Mar 26, 2026 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Cullen/Frost Bankers (Health Plan, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 26 | 4,698 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.