Johnson Controls Under Investigation for Data Breach of Records

Schubert Jonckheer & Kolbe LLP is investigating a data breach impacting the sensitive personal information of individuals affiliated with multinational building automation company Johnson Controls.  

On September 24, 2023, Johnson Controls became aware of suspicious activity that disrupted its information technology infrastructure and resulted in an unauthorized actor gaining access to this data between February 1, 2023 and September 30, 2023. Johnson Controls has not publicly disclosed what information was stolen.

Although the breach occurred in September 2023, Johnson Controls did not begin notifying impacted individuals until on or around June 30, 2025, which may have violated state and federal laws. If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to money damages and an injunction requiring changes to Johnson Controls’ cybersecurity practices.

If you received notification of this data breach or are affiliated with Johnson Controls and wish to obtain additional information about your legal rights, please fill out the form below.