The Johnson Controls Data Breach: Incident Facts and Free Case Review
Johnson Controls reported a data breach to the OR Attorney General's office on July 1, 2025. If Johnson Controls sent you a written notice, that letter connects you to this incident. Whether you have a legal claim depends on the specific facts of the breach and your situation — a free case review can help you understand your options.
This breach is real, not a scam. Johnson Controls officially reported it to the OR Attorney General on July 1, 2025.
Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278
Received a Johnson Controls notification letter? Find out in minutes if you qualify for compensation.
Free case review- State
- OR
- Breach date
- February 1, 2023
- Reported
- July 1, 2025
What to do if you were affected
These general steps can help limit the risk of identity theft and fraud after any data breach.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: OR Attorney General filing
Related data breach cases
- Roseburg Therapy dba Stronger OregonOregon
- AllCare Health, Inc.Oregon
- Hood River DentalOregon
- PeaceHealth Sacred Heart Medical CenterOregon
- iRhythm Technologies Inc.Oregon
- Sheppard, Mullin, Richter & Hampton LLPOregon
- Midvale Indemnity CompanyOregon
- Poppins Payroll CompanyOregon
- City of McMinnvilleOregon
- Lamb Weston Holdings, Inc.Oregon
- Upbound Group, Inc.Oregon
- OneMain FinancialOregon
- MedImpact Healthcare Systems, Inc.Oregon
- Call-On-Doc, Inc.Oregon