Jack Henry & Associates IncCybersecurity incident may lead to regulatory scrutiny and reputational damage, though limited impact.

Jack Henry & Associates has issued a statement on its response to a cybersecurity incident, saying the breach affected only a limited portion of its internal, non-production corporate environment and that no client-facing systems or core platforms were accessed or disrupted. The company, which serves more than 7,200 financial institutions, said fewer than 10 clients had personally identifiable information impacted, and it is offering two years of credit monitoring to those affected. The incident began with a vishing attack by a threat actor identified as ShinyHunters, and Jack Henry said it did not pay any ransom and that the incident is not financially material. The company is working with an independent cyber forensics firm and federal law enforcement.
Jack Henry & Associates IncCybersecurity incident may lead to regulatory scrutiny and reputational damage, though limited impact.