Jack Henry & Associates disclosed a cybersecurity incident in a limited portion of its internal, non-production environment, but said no client-facing systems, core platforms, or daily processing services were disrupted and no system outages occurred. The company reported that personally identifiable information involving fewer than 10 clients was impacted. The incident stemmed from a vishing attack and was quickly detected and contained by its security controls. Jack Henry is working with an independent cybersecurity firm and federal law enforcement and stated it will not make an extortion payment. The company said the incident is not financially material.
Jack Henry & Associates IncCybersecurity incident disclosed, though limited and not material, may raise regulatory and reputational concerns.
