Johnson Controls International spent $27 million remediating a September 2023 ransomware attack on its systems - an attack that government officials warned at the time could threaten physical security.
According to a filing with the US Securities & Exchange Commission this week, the building automation, HVAC, and fire protection giant uncovered the attack the weekend of Sept. 23, after receiving reports of system outages.
It was a ransomware hit that locked up internal IT infrastructure and allowed assailants to exfiltrate company data.
The filing didn't mention which gang JCI determined to be behind the cyberattack, but at the time researchers attributed it to Dark Angels using a custom VMware ESXi encryptor.
This Cyber News was published on www.darkreading.com. Publication date: Wed, 31 Jan 2024 21:50:04 +0000