JKHY Jack Henry & Associates, Inc.

JKHY's 2026 10-K adds a new cryptocurrency-regulation risk factor and markedly escalates cybersecurity and AI risks by explicitly acknowledging past security incidents and expanding the threat landscape to include frontier AI-enabled cyber-attacks, as of the quarter ended 2026-06-30.

• highMoreover, the legislative and regulatory landscape continues to evolve to include alternative payment types, including digital and cryptocurrencies. — New risk addressing rapidly evolving oversight of crypto assets, stablecoins, and digital currencies, including the GENIUS Act and associated AML, sanctions, and consumer-protection compliance obligations.

• highOur services and infrastructure are heavily reliant on the internet. — Changed from 'increasingly' to 'heavily' reliant and substantially expanded to describe frontier AI-enabled attacks, deepfakes, zero-day vulnerability exploitation, and explicit acknowledgment that the company has experienced phishing and cybersecurity incidents targeting its associates, clients, and systems.
• highData security breaches, failures, or other incidents could damage our reputation and business. — Now explicitly states that cybersecurity incidents 'have occurred in our systems in the past, and may occur in our systems in the future,' escalating from a hypothetical to an acknowledged recurring threat.
• highThe increasing adoption of artificial intelligence (AI), machine learning (ML), and generative artificial intelligence into our products introduces significant and evolving risks that could lead to unintended consequences, result in reputational harm, and increased litigation. — Significantly expanded to add state-federal regulatory tension, intellectual property risks from generative AI misuse, and broader compliance uncertainty in high-risk industries like financial services.

Current 10-K · Prior 10-K