United States
USA
DARK ANGELS ransomware hits JOHNSON CONTROLS; data theft, $27M impact
JOHNSON CONTROLS confirmed that a September 2023 incident involved unauthorized access, data exfiltration and ransomware, forcing portions of IT offline and impacting some customer‑facing systems. An SEC filing reported about $27 million in lost/deferred revenues and expenses for the quarter ended Dec. 31, 2023. The DARK ANGELS group claimed responsibility and a $51M demand.
75
Estimated severity
75 / 100
84
Source reliability
84 / 100
Approximate Date
23/09/2023
Targeted Company
JOHNSON CONTROLS
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
$27M
Impact types
Operational disruptionERP or business system disruption
Affected sectors
Manufacturing
Affected departments
Information Technology
Attack Profile
Attack types
RansomwareData exfiltrationUnauthorized access
Attributed threat actors
DARK ANGELS
Sources
Incident Sources
securityweek.comhttps://www.securityweek.com/johnson-controls-ransomware-attacks-data-theft-confirmed-cost-exceeds-27-millionbleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/johnson-controls-says-ransomware-attack-cost-27-million-data-stolencybersecuritydive.comhttps://www.cybersecuritydive.com/news/johnson-controls-ransomware-costs/706149securitysales.comhttps://www.securitysales.com/news/johnson-controls-27m-data-ransomware-attack/156484darkreading.comhttps://www.darkreading.com/ics-ot-security/johnson-controls-ransomware-cleanup-costs-27m