Data Breach Summary
Johnson Controls, a global leader in building technology solutions, has reported a significant cyber incident that occurred between February 1, 2023, and September 30, 2023. The breach was detected on September 24, 2023, and involved unauthorized access to the company’s IT systems, potentially exposing personal information. Johnson Controls has since taken immediate action to contain the incident, notify affected individuals, and implement stronger security measures.
On September 24, 2023, Johnson Controls became aware of unauthorized access to its network, prompting the company to investigate the incident with the assistance of third-party cybersecurity experts. The investigation revealed that an unauthorized party accessed and took data from certain systems between February 1, 2023, and September 30, 2023.
In response to the breach, Johnson Controls acted quickly to secure its systems and prevent further unauthorized access. The company immediately engaged third-party cybersecurity specialists to further investigate the incident and mitigate any potential impact. Law enforcement was notified, and the breach was publicly disclosed in filings to the U.S. Securities and Exchange Commission (SEC) on September 27, 2023, November 13, 2023, and December 14, 2023.
As a precautionary measure, Johnson Controls is offering affected individuals complimentary Equifax Credit Watch™ Gold credit monitoring services for two years.
While the exact scope of the compromised data is still being reviewed, it is believed that the unauthorized actor took personal information, which may have included:
Names
Addresses
Dates of birth, etc
There is no evidence at this time to suggest that the information has been misused
The personal and sensitive information compromised in this breach includes elements that could lead to serious privacy issues for the affected individuals. Those impacted are at an increased risk of identity theft, where their information could be used without their knowledge to commit fraud or other illegal activities.
If your personal information has been breached, it’s important to take immediate and proactive steps to minimize the potential impact and protect yourself from identity theft or fraud. Here are some general actions that you should consider taking:
Monitor Credit Reports: Check your credit reports regularly for suspicious activity.
Place a Fraud Alert or Credit Freeze: Set up a fraud alert or freeze your credit to prevent unauthorized access.
Monitor Financial Accounts: Review bank and credit card statements for unfamiliar transactions.
Watch for Phishing Scams: Be cautious of unsolicited requests for personal information.
Change Passwords: Update passwords for online accounts and use strong, unique ones.
Enable Two-Factor Authentication: Add an extra layer of security to online accounts.
Review Health and Insurance Info: Check for fraudulent charges if health data was exposed.
If you were impacted by the Johnson Controls data breach, you may have the right to seek compensation for the potential harm caused. Class Action U is dedicated to helping data breach victims connect with skilled attorneys who specialize in this area of law and can guide you through the legal process.
Individuals whose personal information was exposed may have valid grounds to join a class action lawsuit, allowing them to pursue restitution.
If your data was compromised, you could be entitled to compensation for:
Loss of privacy
Time spent resolving the breach
Out-of-pocket expenses
Emotional distress
By pursuing a class action lawsuit, you not only have the opportunity to recover damages but also help hold Johnson Controls accountable, potentially prompting them to strengthen their security measures. Reach out to Class Action U today to find out if you qualify for a data breach class action and learn more about the compensation you may be entitled to.
©2024 ClassActionU
