Johnson Controls data breach

Clerk's notes

Johnson Controls submitted a data breach filing to Oregon state regulators on July 1, 2025. This notification pertains to a cybersecurity incident that reportedly began on February 1, 2023. The nature of the breach and the specific types of personal information involved have not been publicly detailed in this filing.

At present, the incident remains under investigation. This means that authorities and the company are actively working to understand the full scope of what occurred, which individuals were impacted, and what specific data may have been exposed. For affected individuals, this period of investigation can be particularly concerning.

If you received a data breach notification letter from Johnson Controls, it indicates that your personal information may have been compromised. While the exact details are still emerging, it is crucial to remain vigilant against potential misuse of your data. Review the letter carefully for any specific advice the company provides.

As a concrete step, consider closely monitoring your financial accounts and credit reports for any suspicious activity. You may also want to be wary of unsolicited emails, texts, or phone calls, as these could be phishing attempts designed to trick you into revealing more personal information. Regularly changing passwords for online accounts is also a good practice.

Many individuals affected by data breaches choose to explore their legal options. Understanding the details of this filing and how it impacts your rights can be complex. You may be able to request a free case review to discuss your situation and learn more about potential legal avenues available to you.

If a notification letter about this breach reached you, see every OR data breach on file or browse all cases.