Jack Henry & Associates has detected a cybersecurity incident affecting a part of its internal, non-production corporate environment.
The incident started with a voice phishing attack initiated by ShinyHunters, a well-known cybercrime operation, the financial technology company said Monday. The incident involved an extortion attempt, but Jack Henry said it will not make any payment to the threat actor.
The incident affected personally identifiable information for fewer than 10 clients, the company said, and did not impact any core platforms, operating systems, client-facing systems, or daily processing services.
"We have notified our more than 7,200 clients that an incident occurred, and we are working directly with the affected clients," the company said. "We are offering two years of credit monitoring services to impacted financial institutions to provide to their accountholders."
The incident also didn't lead to system outages and is not financially material to the company, it said.
Jack Henry said it deployed protocols to secure its network after detecting the unauthorized activity, and engaged a third-party cyber forensics company to assist in its investigation. It also said it is actively collaborating with federal authorities.
Comments