Breachesby GlyphJohnson Controls
Disclosed Sep 27, 202316,729 affectedConfirmed
Ransomware attack on Johnson Controls disrupts IT and exposes personal data
Building technology firm Johnson Controls disclosed a cybersecurity incident that disrupted parts of its IT infrastructure in September 2023. Its later breach notices said an unauthorized actor had access to its systems from February 1 to September 30, 2023 and took information including personal data.
What is known
| People affected | 16,729 (as reported by the organization) |
|---|---|
| Disclosed | Sep 27, 2023 |
| Discovered | Sep 24, 2023 |
| Happened | Feb 1, 2023 |
| Attack | Ransomware |
| Data exposed | NamesOther |
| Sector | Manufacturing · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: Johnson ControlsWashington Attorney General breach notice: Johnson ControlsOregon DOJ breach notice: Johnson ControlsCalifornia AG data breach notice: Johnson ControlsJohnson Controls International plc Form 8-K, September 27, 2023Indiana Attorney General 2025 data breach report: Johnson Controls
Notices filed
Other breaches at Johnson Controls
History of this record
empty to organizationby backfillSource
empty to 16729by backfillSource
other to manufacturingby seedSource
hacking to ransomwareby seedSource
[] to ["names","other"]by seedSource
2025-06-30 to 2023-09-27by seedSource
empty to Building technology firm Johnson Controls disclosed a cybersecurity incident that disrupted parts of its IT infrastructure in September 2023. Its later breach notices said an unauthorized actor had access to its systems from February 1 to Sby seedSource
empty to Ransomware attack on Johnson Controls disrupts IT and exposes personal databy seedSource
unknown to hackingby backfillSource
empty to 2023-09-24by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.