Johnson Controls starts notifying people affected by 2023 breach

Johnson Controls suffered a large-scale ransomware attack (Feb–Sep 2023) attributed to the Dark Angels group that encrypted VMware ESXi systems, impacted global operations, and resulted in the theft of roughly 27 TB of corporate data; attackers reportedly demanded $51 million, the company incurred at least $27 million in response costs, and investigators linked the deployed encryptors to known ransomware families and double-extortion tactics.