Jack Henry & Associates Rejects Extortion After Vishing Attack

Jack Henry & Associates Inc. detected a cybersecurity incident involving a sophisticated vishing attack carried out by the threat actor ShinyHunters. The breach was confined to a portion of the company's internal, non-production corporate environment, leaving client-facing systems, core platforms, and daily processing services secure and fully operational.

An investigation determined that personally identifiable information for fewer than 10 clients was impacted. In response, the company notified over 7,200 clients and is providing two years of credit monitoring services to the affected financial institutions for their accountholders.

Jack Henry is collaborating with federal law enforcement and an independent cyber forensics firm to address the breach. The company stated it will not pay the extortion demand and determined the incident is not financially material to the organization.