<?xml version="1.0" encoding="UTF-8"?>
<incident>
  <arrest type="boolean">false</arrest>
  <breach-type-id type="integer">1</breach-type-id>
  <comments-count type="integer">5</comments-count>
  <data-family-id type="integer">1</data-family-id>
  <data-recovered type="boolean">false</data-recovered>
  <disputed type="boolean">false</disputed>
  <fringe type="boolean">false</fringe>
  <fringe-description nil="true"></fringe-description>
  <id type="integer">288</id>
  <lawsuit type="boolean">false</lawsuit>
  <records type="integer">9300</records>
  <submission-id type="integer" nil="true"></submission-id>
  <updated-at type="datetime">2010-04-14T23:04:39Z</updated-at>
  <user-id type="integer" nil="true"></user-id>
  <breach-types type="array">
    <breach_type>
      <name>Hack</name>
    </breach_type>
  </breach-types>
  <data-types type="array">
    <data_type>
      <short_name>CCN</short_name>
    </data_type>
  </data-types>
  <timeline-items type="array">
    <timeline_item>
      <first_date>2006-05-19 00:00:00 UTC</first_date>
      <type>Organization reports incident</type>
    </timeline_item>
  </timeline-items>
  <vector>
    <name>Outside</name>
  </vector>
  <primary-organization>
    <business-type-id type="integer">1</business-type-id>
    <freebase-cached-data>
      <companies-acquired type="array"/>
      <name>unknown</name>
      <net-income type="array"/>
      <market-capitalization type="array"/>
      <subsidiary-companies type="array"/>
      <ticker-symbol type="array"/>
      <board-members type="array"/>
      <type>/business/company</type>
      <operating-income type="array"/>
      <number-of-employees type="array"/>
      <revenue type="array"/>
    </freebase-cached-data>
    <freebase-description></freebase-description>
    <freebase-pref-name>Unknown</freebase-pref-name>
    <id type="integer">80</id>
    <is-private type="boolean">false</is-private>
    <name>Unknown Organization</name>
    <stock-symbol></stock-symbol>
    <updated-at type="datetime">2012-02-06T21:43:44Z</updated-at>
  </primary-organization>
  <secondary-organizations type="array">
    <secondary-organization type="Organization">
      <business-type-id type="integer">1</business-type-id>
      <freebase-cached-data>
        <companies-acquired type="array"/>
        <name>Frost National Bank</name>
        <net-income type="array"/>
        <market-capitalization type="array"/>
        <subsidiary-companies type="array"/>
        <ticker-symbol type="array">
          <ticker-symbol>
            <ticker-symbol>CFR</ticker-symbol>
            <stock-exchange>NYSE</stock-exchange>
          </ticker-symbol>
        </ticker-symbol>
        <board-members type="array">
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>Royce S Caldwell</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>Patrick B Frost</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>Thomas Clayborne Frost</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>Ida Clement Steen</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>Ruben Escobedo</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>R Denny Alexander</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>Carlos Alvarez</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>Crawford H Edwards</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>Karen E Jennings</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>Richard M Kleberg III</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>Robert S Mcclane</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>Horace Wilkins Jr</member>
            <to nil="true"></to>
          </board-member>
          <board-member>
            <title nil="true"></title>
            <from nil="true"></from>
            <member>James W. Callaway</member>
            <to nil="true"></to>
          </board-member>
        </board-members>
        <type>/business/company</type>
        <operating-income type="array"/>
        <number-of-employees type="array">
          <number-of-employee>
            <number type="integer">3900</number>
            <year nil="true"></year>
          </number-of-employee>
        </number-of-employees>
        <revenue type="array">
          <revenue>
            <amount type="float">802400000.0</amount>
            <currency type="array">
              <currency>
                <name>US$</name>
              </currency>
            </currency>
            <valid-date>2007</valid-date>
          </revenue>
        </revenue>
      </freebase-cached-data>
      <freebase-description type="Organization">Frost National Bank is a nationally chartered bank founded in 1868 and based in San Antonio, Texas with more than 110 financial centers across Texas. Frost is the largest Texas-based banks with operations only in Texas, and is the 62nd largest U.S. bank by asset size. The company offers a full range of commercial and consumer banking products, investment and brokerage services, insurance products and investment banking needs to customers throughout Texas.
Frost is a subsidiary of Cullen/Frost Bankers, Inc. (NYSE:&#160;CFR), a financial holding company, also based in San Antonio, with $16.3 billion in assets. 
Founded in 1868 in San Antonio by Col. T.C. Frost, Frost survived two World Wars, the 1929 stock market crash and the Great Depression, when thousands of banks in the U.S....</freebase-description>
      <freebase-pref-name type="Organization">Frost National Bank</freebase-pref-name>
      <id type="integer">293</id>
      <is-private type="boolean">false</is-private>
      <name type="Organization">Frost Bank</name>
      <stock-symbol type="Organization">CFR</stock-symbol>
      <updated-at type="datetime">2010-04-07T20:38:29Z</updated-at>
    </secondary-organization>
  </secondary-organizations>
  <summary>
    <summary>About 9300 customers' debit card information stolen from the database of an unnamed national retailer</summary>
  </summary>
  <comments type="array">
    <comment>
      <content>We're told that Frost bank isn't the only bank involved in this.  Unfortunately, we have no further details.  If anyone has any additional information, please feel free to contact us.</content>
      <created_at>2009-01-12 15:31:04 UTC</created_at>
    </comment>
    <comment>
      <content>An anonymous commenter says: &quot;You do not need to single out Frost Bank in this incident. It was not Frost that was hacked, but its was an unaffiliated third party. The average consumer or business person will only see the name Frost and the work &quot;hack&quot; and assume it was the company's system that was compromised. Action Needed: Remove &quot;Frost&quot; from the reference here as Frost's internal systems nor its direct providers were involved in this. If you do not remove the name then you must add the names of all of the other financial institutions who had customers in the retailer incident. See your own reference material to understand this was not a Frost issue: &quot;The information system breach compromised credit card accounts with banks across the nation,...&quot; If you do not know the name of the party breached then you should say &quot;unknown&quot;.&quot;</content>
      <created_at>2009-01-14 14:23:16 UTC</created_at>
    </comment>
    <comment>
      <content>An anonymous commenter says: &quot;This issue had nothing to do with FROST BANK. Please remove any reference to FROST BANK as it is creating undue concern and is erroneous and inappropriate. The incident described here was strictly related to a Master Card merchant and not FROST.&quot;</content>
      <created_at>2010-03-12 23:55:27 UTC</created_at>
    </comment>
    <comment>
      <content>This incident was originally listed as 100 affected, but has been updated. According to the 'SA Business' article, 9300 records were stolen and only 100 were confirmed as 'abused'.

Frost Bank has been updated as an 'affected organization' and 'unknown' is listed as the primary now.</content>
      <created_at>2010-04-07 14:00:45 UTC</created_at>
    </comment>
    <comment>
      <content>Is this current? I know 6 Frost customers including myself that had their debit info hacked and used this week. Bank says it is not unusual. I think for 1 person to know 6 different families is not normal.</content>
      <created_at>2010-08-07 18:57:23 UTC</created_at>
    </comment>
  </comments>
  <location>
    <address>USA</address>
    <thoroughfare_name></thoroughfare_name>
    <dependent_locality_name></dependent_locality_name>
    <locality_name></locality_name>
    <sub_administrative_area_name></sub_administrative_area_name>
    <administrative_area_name></administrative_area_name>
    <postal_code_number></postal_code_number>
    <country_name_code>US</country_name_code>
    <longitude>37.0902</longitude>
    <latitude>-95.7129</latitude>
    <accuracy>1</accuracy>
  </location>
</incident>

