.png)
Current and former employees and other individuals living in the United States who received a notice stating the Johnson Controls data breach that occurred between Feb. 1, 2023, and Sept. 30, 2023, may have been compromised their private information could be eligible to submit a claim for up to $5,000 from a class action settlement.
Johnson Controls Inc. agreed to pay $5.48 million to settle a class action lawsuit alleging a cybersecurity incident at its company may have exposed sensitive personal data. The cyberattack compromised approximately 578,699 individuals.
Who can file a claim for a data breach payout?
Class members are individuals residing in the United States who received notice that the Johnson Controls 2023 data breach may have compromised their private information.
How much are settlement payments?
Class members have the following benefit options:
- Cash payment A – Documented losses: Class members can claim up to $5,000 for documented out-of-pocket losses related to the data breach. Eligible expenses may include:
- Actual monetary losses from identity theft traceable to the data incident
- Postage for contacting financial institutions
- Mileage, parking, notary and research charges
- Bank or credit card fees
- Accountant or attorney professional fees for services
- Cash payment B – Alternate cash: Class members who do not submit a documented losses claim can submit a claim to receive an estimated $50 pro rata cash payment. The settlement administrator will determine the final payment amount by the total number of valid claims filed.
- Credit monitoring: All class members can elect to receive two free years of one-bureau credit monitoring, which includes real-time alerts and up to $1,000,000 in identity theft insurance.
How to claim a class action rebate
To receive a settlement payment, class members can file a claim online or print and complete the PDF claim form and mail it to the settlement administrator.
Settlement administrator's mailing address: In re Johnson Controls Inc. Data Incident Litigation, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324
The claim deadline is Feb. 1, 2027.
Required proof and claim information
- Online claims require the class member ID from the settlement notice the class member received.
- Documented losses claims require supporting documentation, which may include receipts, invoices, bank or credit card statements and other proof of identity theft or fraud.
Payout options
- Zelle
- PayPal
- Venmo
- Paper check
- E-Mastercard
Settlement fund breakdown
The $5,475,000 settlement fund will include
- Settlement administration costs: To be determined
- Attorneys’ fees: Up to $1,825,000 plus reasonable costs and expenses
- Service awards to class representatives: $4,000 each ($32,000 total)
- Credit monitoring: Cost determined by number of enrollments
- Payments to approved claimants: Remaining settlement funds
Important dates
- Deadline to opt out: Jan. 4, 2027
- Fairness hearing: Jan. 15, 2027
- Deadline to file a claim: Feb. 1, 2027
When is the Johnson Controls data breach settlement payout date?
The settlement administrator will issue payments to approved claimants approximately 90 days after the court grants final approval of the settlement.
Why is there a class action settlement?
The class action lawsuit claimed Johnson Controls experienced a cybersecurity incident that may have exposed sensitive personal information, including names, Social Security numbers, dates of birth, health insurance and medical information, financial account information, government identification numbers and biometric data. The plaintiffs alleged negligence, breach of implied contract, unjust enrichment and violations of consumer protection statutes.
The company denies any wrongdoing but agreed to settle to avoid the uncertainty and cost of further litigation and a possible trial.
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.svg)