Security Update: Voicemail Phishing Campaign Has Been Resolved
We are pleased to confirm that the security issue we disclosed on October 8, 2026 has been resolved. We want to thank every associate who reported a suspicious email, responded to our guidance, and exercised caution during this period. Your quick response made a meaningful difference in how efficiently our team was able to investigate and close out this incident.
This update serves as the official close of the October 8 security notice. We are sharing the outcome in full, consistent with the same transparency that guided our decision to publish the original advisory.
What Was Resolved
Our IT and security teams worked quickly following the initial disclosure to identify, contain, and eliminate the source of the phishing campaign. The following actions were completed as part of the resolution.
The malicious sending infrastructure has been identified and blocked. No further delivery of the "You have a new voicemail" phishing emails to Joyner associate accounts is occurring.
All accounts that were reported as having interacted with the phishing emails have been reviewed. Our investigation found no evidence of unauthorized access or credential compromise.
Our IT team completed a review of our internal email security configuration as part of the incident response. Additional safeguards have been implemented to reduce exposure to similar campaigns in the future.
At no point during this incident was customer or B2B partner data at risk. The campaign was limited to internal associate email accounts, and no data exposure of any kind has been identified.
Incident Timeline
Joyner associates began reporting suspicious "You have a new voicemail" emails to the IT team. Security investigation initiated immediately.
Joyner published a proactive security notice on the newsroom to inform associates and the public, and activated an incident report form routed to it@myjoyner.com.
IT and security teams identified the phishing infrastructure, reviewed affected accounts, and implemented server-level blocking to stop further email delivery.
Investigation complete. No accounts compromised, no data exposure. Additional email security safeguards implemented. Incident formally closed.
"We said we would communicate openly throughout this situation, and we intend to keep that commitment through to the close. This is resolved, and we are grateful to every associate who took it seriously."Joyner Companies — IT & Security Team, October 2026
Staying Vigilant Going Forward
While this specific campaign has been stopped, phishing attempts are an ongoing reality for organizations of all sizes. We encourage all Joyner associates to continue applying the same caution they showed during this incident — particularly when receiving unexpected emails that ask you to click a link, open an attachment, or enter login credentials.
If you ever receive an email that feels suspicious — whether it references a voicemail, a missed delivery, an account alert, or anything else out of the ordinary — please forward it to our IT team before taking any action. We would always rather review a false alarm than miss a real one.