Johnson Controls says ransomware attack cost $27 million, data stolen

Johnson Controls disclosed a September 23, 2023 ransomware incident attributed to the Dark Angels gang that resulted in unauthorized access, deployment of ransomware, and alleged exfiltration of more than 27 TB of corporate data; the attackers demanded $51 million, the company incurred $27 million in remediation expenses, and has been working with external forensics while restoring services and assessing the extent of the breach.