Threat Intelligence and Security Incidents

Johnson Controls hit with $51 million ransom demand!

Johnson Controls, a global leader in industrial control systems, is battling the notorious "DARKANGELS" ransomware gang. Intruder has locked down the company's data and is demanding a staggering $51 million to release it.

This high-stakes cyber duel has put Johnson Controls in a bind, disrupting its day-to-day operations. Worse still, a great deal of sensitive information could be at risk, raising widespread security concerns. Johnson Controls has nearly 100,000 employees across its multiple divisions and affiliates (such as ADT, Tyco, York, SimplexGrinnell, and Ruskin).

▍Ransomware Attack Causes Huge Losses

Johnson Controls International revealed in a filing on Wednesday that it is dealing with the aftermath of a cyber incident that affected parts of its internal IT infrastructure and applications.

The Johnson Controls ransomware attack is a cybersecurity incident in which Johnson Controls, a prominent manufacturer of industrial control systems, fell victim to a ransomware attack launched by a ransomware group called "DARKANGELS". In the attack, hackers breached Johnson Controls' IT systems, encrypted their data, and demanded a massive $51 million ransom in exchange for the decryption keys and a promise to delete the stolen data.

Specific details of the data stolen during the Johnson Controls ransomware attack have not been publicly disclosed. However, the hackers reportedly claim to have accessed approximately 27 TB of data.

Reports suggest that the stolen data may include security information related to third-party contracts and floor plans of certain institutional facilities. However, it is worth noting that the full extent of the stolen data and its contents may not have been fully disclosed to the public, and some details may remain confidential due to