Johnson Controls Data Breach Class Action Settlement
People notified that their personal information may have been affected by the 2023 Johnson Controls data incident can claim up to $5,000 for documented losses, or about $50, plus credit monitoring. The claim deadline is February 1, 2027.
Settlement fund
$5.475 million
Total settlement fund
Top payout
Up to $5,000
Documented losses up to $5,000, or about $50 cash, plus monitoring
Claim deadline
Feb 1, 2027
81 days remaining
You may be owed money
Get claim instructions and more information directly from the official settlement website. Deadline: Feb 1, 2027.
Do you qualify?
You are a Class Member if ALL of the following apply:
- All living individuals residing in the United States who were sent notice that their Private Information may have been compromised as a result of the Johnson Controls Data Incident.
- Excluded: Directors or officers of Defendant, and any entity in which Defendant has a controlling interest.
- Excluded: Governmental entities.
- Excluded: The Judge assigned to the Action, the Judge's immediate family, and Court staff.
- Excluded: Anyone who timely and validly opted out of the Settlement.
- Excluded: Anyone found guilty of, or pleading nolo contendere to, initiating, causing, aiding or abetting the criminal activity of the Data Incident.
Not sure if you qualify? Contact the Settlement Administrator (Kroll Settlement Administration LLC) at (833)-453-2575, In re Johnson Controls, Inc. Data Incident Litigation c/o Kroll Settlement Administration LLC P.O. Box 5324 New York, NY 10150-5324, or visit johnsoncontrolsdatasettlement.com.
What happened
An unauthorized actor accessed certain Johnson Controls systems from approximately February 1, 2023 to September 30, 2023, and potentially accessed or exfiltrated data including names, Social Security numbers, dates of birth, health, financial, government ID and biometric information. Johnson Controls began notifying affected individuals in June 2025.
The defendant denies any wrongdoing. No court has decided who is right.
How to file a claim
1. Confirm you are eligible
All living individuals residing in the United States who were sent notice that their Private Information may have been compromised as a result of the Johnson Controls Data Incident.
2. Gather what you need
Cash Payment A (documented losses): attest under penalty of perjury and submit reasonable documentation supporting the losses (e.g., identity theft losses, postage, copying, mileage, parking, notary, phone/data charges, bank fees, professional fees). Cash Payment B (alternate cash) and Credit Monitoring: no documentation required.
3. Choose your benefits
Cash Payment A – Documented Losses: Up to $5,000 (proof required). Cash Payment B – Alternate Cash: Pro rata share (estimated $50). Credit Monitoring (in addition to Cash Payment A or B): Two years of one-bureau Credit Monitoring.
4. File online or by mail
Submit a Claim Form online using the Submit Claim button on the Settlement Website by 11:59 p.m. PT on February 1, 2027, or mail a paper Claim Form postmarked by February 1, 2027 to the Settlement Administrator. Open the claim form.
Key dates
- Jan 4, 2027Opt-out & objection deadlineUpcoming
- Feb 1, 2027Claim filing deadlineUpcoming
- Jan 15, 2027Final Fairness Hearing (9:30 a.m. CT)Upcoming
- TBD after final approvalPayments issued to claimantsPending
Where the money is going
This is a common fund settlement: Johnson Controls will pay $5,475,000 into a Settlement Fund. The fund first pays Settlement Administration Costs and any Court-approved attorneys' fees, costs, and service awards. The remaining Net Settlement Fund pays valid claims in order: Credit Monitoring, then Cash Payment A (documented losses up to $5,000), then Cash Payment B. Cash Payment B is calculated by dividing the remaining balance of the Net Settlement Fund by the number of valid claims, so it may be higher or lower than the estimated $50.
All amounts listed above are pending and subject to final court approval at the Final Approval Hearing. The Court may award less than the amounts requested. The $50 Cash Payment B figure is only an estimate and will be increased or decreased pro rata based on the number of valid claims.
Common questions
How much can I get?
Settlement Class Members may choose either Cash Payment A, up to $5,000 for documented losses related to the Data Incident, or Cash Payment B, an alternate cash payment estimated to be $50 that may increase or decrease pro rata based on the number of Valid Claims. They may also claim two years of one-bureau Credit Monitoring.
Do I need proof to file a claim?
Cash Payment A requires reasonable documentation supporting the losses and an attestation under penalty of perjury. Cash Payment B does not require attestation or the submission of any supporting documentation.
What is the deadline to file a claim?
All claims must be submitted online or postmarked on or before February 1, 2027.
What if I did not receive a notice?
The site says the Settlement Class consists of all living individuals residing in the United States who were sent notice that their Private Information may have been compromised as a result of the Data Incident. The site does not describe a separate process for people who did not receive notice; it says you may contact the Settlement Administrator via the Contact Us form, by telephone at (833)453-2575, or by mail with additional questions.
Dapeer Law, P.A.
Consumer class action attorneys based in South Florida. We track settlements so you don’t have to.
Similar open settlements
This page is for informational purposes only and does not constitute legal advice. Dapeer Law, P.A. is not the administrator of this settlement and is not affiliated with Johnson Controls, Inc., Kroll Settlement Administration LLC (the Settlement Administrator), or Class Counsel Raina Borrelli of Strauss Borrelli PLLC, Jeff Ostrow of Kopelowitz Ostrow, Gary Klinger of Milberg PLLC, and Kevin Laukaitis of Laukaitis Law, LLC. The case is In re Johnson Controls, Inc. Data Incident Litigation, Case No. 25-cv-00955-BHL, pending in the United States District Court for the Eastern District of Wisconsin before the Honorable Brett H. Ludwig. Class representatives are Jennifer C. Gorman, Hal Bauer, Derek Hefley, Carol McKinnon, Frank Waddell, Chris Broadhead, Mohammad Asem Alkhatib, and William John Pacheco. Johnson Controls denies wrongdoing. This website is attorney advertising. Past results do not guarantee future outcomes.
