Johnson Controls reports disruption to internal IT infrastructure from a cybersecurity incident

Johnson Controls International, the building systems and HVAC company, disclosed on September 27, 2023 that a cybersecurity incident had disrupted portions of its internal information technology infrastructure and applications. It was also weighing whether the incident would delay its fiscal year-end results.

What Johnson Controls said

The company said many applications were largely unaffected and that it had put workarounds in place for some operations. It was still assessing what information was involved.

The filing raised a reporting question that few others in this log mention.

What is missing

Johnson Controls gave no detection date, did not describe the attack, and made no materiality finding in this filing. It said it was coordinating with insurers. No follow-up 8-K for the incident is in this log, so the eventual cost and any data findings are not recorded on this page.