Jack Henry reports limited cyber breach in non-production systems 

Jack Henry has disclosed a cybersecurity breach affecting a “limited portion” of its internal, non-production corporate environment. 

The breach did not reach client-facing systems, operating systems, core platforms, or day-to-day processing services.  

Those systems remain secure and operational, according to the company, which also said there were no outages. 

From the investigation so far, Jack Henry said personally identifiable information (PII) linked to fewer than 10 clients was affected. 

 It added that more than 7,200 clients were informed that the incident had taken place, and that it is in contact with those impacted. 

The company will provide two years of credit monitoring services to affected financial institutions for use by their accountholders. 

Jack Henry said the breach began with a social engineering attack known as vishing, or voice phishing, carried out by a threat actor it identified as ShinyHunters. 

It said its security measures detected and contained the unauthorised activity. 

After the breach was identified, the company teams used specialised protocols to protect the network, separate affected systems, and increase safeguards. 

Jack Henry engaged an independent third-party cyber forensics firm to assist with the investigation and response, while continuing to work with federal law enforcement. 

The matter included an extortion attempt and that no payment was made to the threat actor. It added that the breach is not financially material to the business. 

In a statement, the company said: “Protecting the financial institutions we serve and maintaining transparency are fundamental to everything we do at Jack Henry. We recognise and deeply regret any concern this incident may cause to our clients and their accountholders. 

“Cyber incidents are an industry-wide reality, and our commitment to standing as a vigilant line of defence remains absolute. Through proactive monitoring and our rapid response framework, we effectively mitigated the threat and maintained operational integrity. 

“We deeply value the trust our clients place in Jack Henry and will continue to keep them informed as part of our commitment to transparency.”