Where does the Johnson Controls case file come from?

Every entry is taken from the breach report Johnson Controls lodged with the Texas Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Johnson Controls Data Breach

This file collects the dated facts on record for the Johnson Controls incident. The state report is dated July 1, 2025. The incident itself is dated February 1, 2023.

Timeline

881 days separate the incident date from the date it was reported.

February 1, 2023Incident dateWhen the filing says the breach took place.
July 1, 2025Report filed in TexasDate the notice was lodged with the Texas Attorney General.

Case facts

Filing state: Texas
Date reported: July 1, 2025
Incident date: February 1, 2023
Receiving office: Texas Attorney General

Case notes

Johnson Controls, a global diversified technology and multi-industrial leader, has formally reported a data breach incident to regulatory bodies in Texas. The company's filing, dated July 1, 2025, addresses an event that occurred on February 1, 2023, where personal information was potentially compromised.

The specific categories of personal information affected by this breach have not been detailed in the public filing. Johnson Controls states that the incident is currently under investigation. This report serves as a public record of the breach as required by law, providing an official point of reference.

While the filing does not specify the data types involved, individuals who receive direct notification from Johnson Controls are advised to carefully read their letters for precise details about what information may have been exposed. Such letters are the primary source of personalized information regarding the impact of the breach.

To safeguard against potential misuse of your data, it is generally recommended to remain vigilant. Regularly review your financial account statements and explanation of benefits for any unauthorized activity. Consider updating passwords for important online accounts, using strong, unique combinations, and enabling multi-factor authentication wherever possible.

Be wary of unsolicited communications, especially those requesting personal information or prompting urgent action, as these could be phishing attempts. All information presented here is based on the official public filing made by Johnson Controls with regulators.

Questions about this case file

Where does the Johnson Controls case file come from?: Every entry is taken from the breach report Johnson Controls lodged with the Texas Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Texas data breaches

Filing source: Texas Attorney General

Named in the Johnson Controls breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Texas case files