Security Notice: Phishing Emails Targeting Joyner Associates
We are writing to inform our associates, partners, and the broader public of a known security issue currently affecting a number of Joyner team members. We take cybersecurity seriously, and we believe that being open about active threats — rather than waiting until they are fully resolved — is the right approach. If you are a Joyner associate, please read this notice carefully and in full.
What Is Happening
Our security team has received multiple internal reports from Joyner associates who have received suspicious emails with the subject line or content indicating "You have a new voicemail." These emails appear designed to prompt recipients to click a link or open an attachment in order to listen to a voicemail that does not exist. This is a known phishing technique used to harvest login credentials or install malicious software on a recipient’s device.
This campaign appears to be targeting Joyner associates specifically — on their internal Joyner email accounts. We have received a significant number of reports internally and our IT and security teams are actively working to identify the source, block further delivery of these messages, and prevent any escalation.
How to Identify This Email
If you are a Joyner associate, here is what to look for. If you have received an email matching any of the characteristics below, do not click any links, do not open any attachments, and report it immediately using the form at the bottom of this page.
The email subject reads something like "You have a new voicemail," "New voicemail message," or similar variations. Joyner does not send voicemail notification emails of this kind.
The email contains a link, button, or attachment inviting you to play or access your voicemail. Do not click it. Hover over any link before clicking — if the destination address looks unfamiliar or does not end in a trusted domain, do not proceed.
The sending address may appear to be from a legitimate-looking domain but is not a recognized Joyner address. Check the full sender email address, not just the display name.
Phishing emails often include language designed to make you act without thinking — phrases like "urgent," "action required," or implied time limits. Take a moment before clicking anything.
What to Do Right Now
If you are a Joyner associate and you have received this email — or anything similar — here are the four steps we ask you to take immediately.
Do not click any links, buttons, or attachments in the suspicious email. Even previewing an attachment can pose a risk on some devices. Leave the email unopened if you have not already opened it.
If you clicked a link and were taken to a page asking for your username, password, or any other login information, do not enter it. Close the page immediately and change your Joyner account password as a precaution.
Use the incident report form at the bottom of this page to alert our IT and security team. Include as much detail as you can — when you received it, what the subject line said, and whether you clicked anything.
Our security team may need to examine the email as part of the investigation. Please leave it in your inbox or move it to a separate folder rather than deleting it, unless our IT team advises otherwise.
Report a Security Incident
If you are a Joyner associate and you have received a suspicious email, experienced anything unusual with your account, or have information that may be relevant to this investigation, please complete the form below. All reports are sent directly to our IT security team at it@myjoyner.com and will be reviewed promptly.
Report Submitted
Thank you for reporting this. Our IT security team has received your submission and will follow up with you if further information is needed. In the meantime, if you have any urgent concerns, contact us directly at it@myjoyner.com.