Jack Henry Suffers Voice Phishing Ransomware Attack

Jack Henry, a major US banking technology provider, confirmed a ransomware attack attributed to the hacking group ShinyHunters, which utilized voice phishing to gain access to its internal systems. The attack compromised personally identifiable information from fewer than 10 of its 7,200 client banks but did not disrupt client-facing systems or core banking operations. The company has offered two years of credit monitoring to affected institutions and has stated it will not pay the ransom demanded by the attackers. Jack Henry's security measures detected and contained the intrusion, and they are cooperating with federal law enforcement. The incident highlights the vulnerabilities of technology vendors to social engineering tactics rather than technical exploits.

Key Points: • Jack Henry was attacked via voice phishing, compromising data from fewer than 10 client banks. • No disruption occurred to client-facing systems or core banking operations during the attack. • Jack Henry is providing credit monitoring for affected institutions and will not pay the ransom.