Johnson Controls Ransomware Cleanup Costs Top $27M & Counting

Johnson Controls International disclosed a September 2023 ransomware attack that locked internal IT infrastructure and involved data exfiltration; remediation and investigation efforts cost the company approximately $27 million (including insurance recoveries and external specialists). Researchers have attributed the incident to the Dark Angels using a custom VMware ESXi encryptor, though JCI reported no evidence of impact to its digital products (OpenBlue, Metasys) and continues investigation and recovery.