Jack Henry Responds to Cybersecurity Incident Involving Vishing Attack

On August 31, 2026, Jack Henry & Associates Inc. reported a cybersecurity incident affecting a limited part of its internal, non-production environment. The incident was initiated by a vishing attack attributed to the threat actor ShinyHunters, impacting personally identifiable information (PII) for fewer than 10 clients. No client-facing systems or operational services were disrupted, and the company did not experience any system outages. Jack Henry has notified over 7,200 clients about the incident and is providing two years of credit monitoring services to the affected financial institutions. The company has engaged a third-party cyber forensics firm and is collaborating with federal law enforcement. Jack Henry confirmed that the incident involved an extortion attempt but stated they will not make any payment to the threat actor. The company emphasized its commitment to transparency and operational integrity.

Key Points: • Jack Henry detected a vishing attack impacting PII for fewer than 10 clients. • No client-facing systems were disrupted, and operational services remained secure. • The company is offering two years of credit monitoring to affected institutions.