Johnson Controls International

JohnsonControls International is also known by the aliases Johnson Controls and York. Its headquarters is located in the United States of America. The organization operates through subsidiaries that include York and Simplex. These subsidiaries are referenced in public disclosures of a recent cybersecurity incident.

On September 22, 2023, Johnson Controls International experienced a ransomware attack carried out by the Dark Angels gang. The attack resulted in the widespread encryption of VMware ESXi servers across the company’s IT environment. Operational disruptions followed, affecting subsidiaries such as York and Simplex and leading to customer portal outages and manufacturing halts. The attackers demanded a payment of fifty‑one million dollars for a decryptor and the deletion of stolen data. They also claimed to have exfiltrated over twenty‑seven terabytes of corporate information.

In response, the company shut down portions of its IT infrastructure to contain the spread of the ransomware. Workarounds were implemented to maintain partial services while remediation efforts proceeded. External cybersecurity experts and the company’s insurers were engaged to investigate the incident, assess data impacts, and mitigate business interruptions. The ongoing remediation was expected to cause delays in financial reporting.