Johnson Controls International Disrupted by Major Cyberattack
The company filed with the SEC and is assessing its operations and financial damages.
![Two people at the front counter of a Johnson Controls establishment Two people at the front counter of a Johnson Controls establishment](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltcb2261dfdfd16443/654e39d79e6ee0040a1f3ef8/johnsoncontrols_Imaginechina_Limited_alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Johnson Controls International (JCI) this week reported in a filing with the US Securities and Exchange Commission (SEC) that it had suffered a cyberattack that caused disruptions to its internal IT infrastructure.
In addition, two of the company's subsidiaries, Simplex and York, are reportedly displaying messages of a "technical outage" on customer portals and login pages.
Gameel Ali, a researcher at Nextron Systems, shared a tweet including a ransom note from cybergang Dark Angels in its VMware ESXi encryptor, stating: "HELLO dear Management of Johnson Controls International! If you are reading this message, it means that: your network infrastructure has been compromised, critical data was leaked, files are encrypted, backups are deleted." The note went on to say, "The best and only thing you can do is to contact us to settle the matter before any losses occurs."
The gang has allegedly stolen over 27TB of data and encrypted the company's VMware ESXi machines in a ransomware attack.
"Johnson Controls is one of the leaders in digital technologies and services for buildings in key industries such as healthcare, airports, hotels and stadiums," Lior Yaari, CEO and co-founder of Grip Security, said in an emailed statement. "If the breach expands beyond the company itself to the systems deployed by their customers, this attack could wreak havoc on huge swaths of businesses."
Johnson Controls said in the SEC filing that its applications remain operation and unaffected but that it continues to review the financial impact on its fiscal year results. The company has also established an incident management and protection plan to mitigate fallout from the attack.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024