Latest / California / June 2025
Johnson Controls
Johnson Controls notified California AG on Jun 30, 2025 of a data breach, which occurred on Feb 1, 2023. Data exposed: Name.
All 3 filings by Johnson Controls, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)
- Organization
- Johnson Controls
- Source
- California AG · source record
- Date reported
- Jun 30, 2025
- Date(s) of breach
- Wednesday, February 1, 2023
- Residents affected
- Not published by this source
- Data exposed
- Name
- Notice letter
- Sample notice (PDF)
- Discovered
- September 2023, as stated in the letter"Notice of Data Breach On behalf of Johnson Controls, we are writing to provide information related to the cyber incident that Johnson Controls became aware of in September 2023, which involved personal information about you."
- Days to notice
- 880 days from the end of the breach window (Feb 1, 2023, no discovery date in the letter) to the California record (Jun 30, 2025). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
- Offered in the letter
- 24 months of credit or identity monitoring through Experian
- Third party
- The letter attributes the incident to a vendor or service provider
- First seen by BreachTally
- 2026-10-30 15:30 UTC
Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.
Other filings by Johnson Controls
| Organization | State | Reported | Residents affected |
|---|---|---|---|
| Johnson Controls | OR | Jul 1, 2025 | 3,829 |
| Johnson Controls | DE | Jun 30, 2025 | 3,722 |
Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.