← Johnson Controls

2023 Johnson Controls — Dark Angels ransomware; multi-TB exfiltration claims; delayed consumer notices

2023 Unknown records affected Share on X

Data compromised

Corporate and building-systems adjacent records described across law-firm summaries—field-level public mapping varies by notice cohort

Technical writeup

Johnson Controls International disclosed a September 2023 enterprise ransomware and data-exfiltration event attributed in security journalism to the Dark Angels group, with actors claiming tens of terabytes of archival theft, eight-figure ransom demands, and follow-on remediation costs above $27 million in vendor financial reporting. Late-2024 and 2025 coverage tracked long-cycle identity-notification programs as forensic scope matured.

Root cause

Ransomware deployment on internal IT with parallel bulk data theft (per vendor and BleepingComputer narratives)

References