Johnson Controls Ransomware Attack - September 2023
| Incident Impacts | Data Theft, Business Disruption |
|---|---|
| Affected Sector | Manufacturing |
| Associated Intrusion Sets | Dark Angels Team Ransomware Group |
| Estimated Cost (USD) | 27000000 |
According to an SEC filing, the weekend of September 23rd, 2023, Johnson Controls suffered from a ransomware attack against IT infrastructure and applications. The SEC filing puts the initial costs of the attack at $27M, which they attribute to 'response to, and remediation of, the incident'.
Public reporting suggests that the attack was conducted using Dark Angels Team ransomware. Initial reports suggested that the company experienced IT outages and prevented access to customer applications. The threat actors claimed to have stolen over 27TB of corporate data.
Cyber Threat Graph Context
Explore how this cyber incident relates to the wider threat graph