Ransomware hits core banking vendor Jack Henry

Ransomware hit Jack Henry, a core banking vendor used by a large number of US community banks and credit unions, according to Finextra's report.

The report doesn't say how many institutions were affected, what data was taken, or when the attack happened. That gap matters because of what Jack Henry is to its customers: a shared vendor sitting underneath many separate banks and credit unions at once. A breach there doesn't stay contained to one bank's network. It reaches every institution on the platform, regardless of how well any one of them secured its own systems.

That's the part that makes this different from a single-bank breach. Customers of a Jack Henry-served bank have no way to check their own exposure. They're waiting on a vendor they've never heard of, that their bank chose on their behalf, to say what happened.

Jack Henry hasn't named which institutions, if any, had customer data exposed. Every bank running on its platform is stuck in the same holding pattern until it does. They can't tell their own customers what happened to their accounts, because the answer sits with a company none of them control.