• June 2025 •

Johnson Controls Data Breach

Last Updated on July 15, 2025

If you received a notice that your information was compromised, you may be able to start a class action to collect money for the harm you’ve suffered.

• Keep reading for more information

At A Glance

What's Going On?: Attorneys need to hear from people affected by the Johnson Controls data breach as they investigate whether a class action lawsuit can be filed.
Does This Cost Anything?: It costs nothing to get in touch or to talk to someone about your rights.
What Can I Get?: If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the breach.

Johnson Controls Data Breach: Lawsuit Investigation

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Johnson Controls data breach.

As part of their investigation, they need to hear from individuals who received a notice stating they were impacted.

Johnson Controls Security Incident: What Happened?

Johnson Controls, a global company that provides building technology solutions including HVAC equipment and systems for security, automation and fire detection, experienced a data breach in 2023 that disrupted its IT systems. Following the discovery of the incident on September 24, 2023, Johnson Controls terminated the unauthorized access and started an investigation with assistance from third-party cybersecurity firms.

The investigation found that the third party had access to certain Johnson Controls systems from February 1, 2023 to September 30, 2023 and had taken data during this time.

The compromised information may include names and other personal data that was provided to Johnson Controls during the course of employment, job applications, contract work or through other interactions with the company and its affiliates or subsidiaries.

The specific information exposed for each impacted individual will be outlined in the company’s notice letter, which was issued in late June 2025.

The Johnson Controls data breach was previously disclosed in filings submitted to the U.S. Securities and Exchange Commission on September 27, 2023, November 13, 2023 and December 14, 2023. The company also notified employees about the incident on October 17, 2023.

What You Can Do After the Johnson Controls Data Breach

If your information was exposed in the data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force Johnson Controls to ensure it takes proper steps to protect the information it was entrusted with.