Latest / Oregon / July 2025

Johnson Controls

Johnson Controls notified Oregon DOJ on Jul 1, 2025 of a data breach affecting 3,829 individuals, which occurred between Feb 1, 2023 and Sep 30, 2023.

All 3 filings by Johnson Controls, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
Johnson Controls
Source
Oregon DOJ · source record
Date reported
Jul 1, 2025
Date(s) of breach
2/1/2023 - 9/30/2023
Residents affected
3,829 (individuals)
Data exposed
Not stated in the source listing
Notice letter
Not available
Days to notice
640 days from the end of the breach window (Sep 30, 2023, no discovery date in the letter) to the Oregon record (Jul 1, 2025). Statute: 45 days from discovery or notification of the breach (ORS 646A.604).
First seen by BreachTally
2026-11-04 16:40 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:40 UTC on Nov 4, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by Johnson Controls

OrganizationSourceStateReportedResidents affectedData exposed
Johnson Controls California AG CA Jun 30, 2025 Not published Name
Johnson Controls Delaware DOJ DE Jun 30, 2025 3,722 Name

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.