Jack Henry 2026 Data Breach
On August 31, 2026, Jack Henry & Associates disclosed unauthorized activity in a limited portion of its internal, non-production corporate environment.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
1- Personally identifiable information
About This Breach
The company said it detected and contained the activity quickly, isolated the affected systems, and brought in an independent cybersecurity forensic firm to support the investigation and response. Its public statement does not give the precise date of the activity, making August 31 the company’s disclosure date rather than a confirmed incident date.
Jack Henry said personally identifiable information associated with fewer than 10 client organizations was affected. It did not disclose the number of people or records involved, or identify the specific categories of information. The stated client-organization figure does not establish an individual count or a more detailed data inventory.
The company said no client-facing systems, operating systems, core platforms, or daily processing services were accessed or disrupted. It also reported no system outages and said it was working directly with the affected clients. Its public notice does not provide a technical account of the activity, a complete timeline, or a final impact total, leaving those elements undisclosed.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
