The Johnson Controls Data Breach: Reported Filing Facts

Johnson Controls is a multinational conglomerate primarily focused on building technology, integrated HVAC systems, and industrial security solutions. Given the nature of their business operations, the company likely stores sensitive employee and contractor data, including payroll records, benefits information, and government-issued identification. This data breach was officially reported to the Delaware Attorney General in 2025, confirming that unauthorized parties may have accessed internal systems. If you have received a formal data breach notification letter from Johnson Controls, it indicates that your personal information was potentially compromised during this incident. We recommend reviewing the letter carefully to understand the specific scope of the exposure and to take immediate steps to monitor your financial and personal accounts for signs of unauthorized activity.

State: Delaware
Breach date: February 1, 2023
Reported: June 30, 2025

What to do if you were affected

These general steps can help limit the risk of identity theft and fraud after any data breach.

Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Related data breach cases

Browse all Delaware data breaches View the full case directory