Jack Henry has disclosed a limited cybersecurity incident in a non-production internal environment that exposed the personally identifiable information of fewer than 10 clients; no client-facing or core systems were compromised and operations remained uninterrupted.
The company attributed the incident to a sophisticated voice phishing attack carried out by the threat group ShinyHunters. Jack Henry said it responded promptly to secure the affected environment, is offering two years of credit monitoring to impacted clients, and is cooperating with law enforcement and a third-party cyber forensics firm.
Jack Henry also stated the incident is not financially material to the company and emphasized its commitment to transparency and security.
Jack Henry response and investigation
According to the company, systems were secured quickly after detection and there was no interruption to customer-facing operations. Jack Henry has notified the affected clients, provided credit monitoring for two years, and engaged a third-party cyber forensics firm while working with law enforcement to investigate the voice phishing attack attributed to ShinyHunters. The firm reiterated that its core processing systems and broader client base were not impacted.
