Johnson Controls Data Breach Settlement
If you live in the United States and Johnson Controls sent you a notice that your private information may have been compromised in its data incident from about February 1, 2023 through September 30, 2023, you can file a claim. Sparrow files the alternate cash payment, estimated at $50 with no documentation, and can include two years of credit monitoring. The deadline is February 1, 2027.
- Payout up to $50
- Payment Subject to pro rata adjustment
- Deadline February 1, 2027
- Proof required No
- Category Data breach
- Administrator In re Johnson Controls, Inc. Data Incident Litigation
- Updated November 11, 2026
What this settlement covers
You live in the United States and were sent a notice that your private information may have been compromised in the Johnson Controls data incident from about February 1, 2023 through September 30, 2023.
The class covers people living in the United States who were sent notice that their private information may have been compromised in the data incident affecting Johnson Controls, Inc. from approximately February 1, 2023 through September 30, 2023. The case is In re Johnson Controls, Inc. Data Incident Litigation, Lead Case No. 25-cv-00955-BHL, in the United States District Court for the Eastern District of Wisconsin.
What you can claim
- An alternate cash payment estimated at $50, with no documentation required.
- Two years of one-bureau credit monitoring, with real-time alerts and up to $1,000,000 of identity theft insurance.
How payment works
The $50 figure is an estimate. It is adjusted pro rata, meaning in proportion to the number of valid claims, so more approved claims mean a smaller payment. Documented out-of-pocket losses of up to $5,000 are part of the settlement but require supporting documents, and Sparrow does not file that option. If a documented-loss claim is rejected and not cured, the administrator converts it to the alternate cash payment. PayPal, Venmo, Zelle, an E-Mastercard, or a check are the payment choices. If the payment mobile number and email are left blank, the administrator mails a check to the address on the form.
The case
- Case
- In re Johnson Controls, Inc. Data Incident Litigation
- Court
- United States District Court for the Eastern District of Wisconsin
- Docket number
- 25-cv-00955-BHL
- Defendant
- Johnson Controls, Inc.
How to file your claim
- Create your account. Sign up for Sparrow in under 2 minutes. We'll show you every settlement that may apply to you.
- We pre-fill your form. Sparrow auto-fills the claim form with your information. Just review and submit.
- Get your payout. The settlement administrator processes your claim and sends payment directly to you.
You can also file directly with the settlement administrator. Read the official settlement notice for the full terms.
Mailed claim forms go to:
In re Johnson Controls, Inc. Data Incident Litigationc/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324
What the claim form asks for:
- Class Member ID
- Credit Monitoring
Johnson Controls Data Breach Settlement FAQs
Common questions about this class action settlement.
What can I claim without documents?
An alternate cash payment estimated at $50, and two years of one-bureau credit monitoring with real-time alerts and up to $1,000,000 of identity theft insurance. Neither one asks for proof of a loss. The monitoring is available even if you already received a credit monitoring product because of this incident or for some other reason. Taking the monitoring does not replace the cash, so you can claim both. The cash amount is an estimate and moves in proportion to how many valid claims are approved. Sparrow files this no-documentation option.
What about documented losses?
The settlement offers up to $5,000 per person for documented out-of-pocket losses related to the data incident. Covered costs include unreimbursed identity-theft losses that are documented, fairly traceable to the incident, and dated between February 1, 2023 and the day the claim is submitted, plus postage, copying, scanning, faxing, mileage and other travel charges, parking, notary charges, research charges, certain phone, data, and text charges, bank fees, and professional fees for accountants and attorneys. You have to select documented losses, attach documentation, and attest that the losses were related to the incident. Money already reimbursed, including through the identity protection in the notification letter, is not paid again. Sparrow does not file this option, because those documents have to be sent with the claim. If the administrator rejects the documented claim and it is not cured, the claim converts to the estimated $50 alternate cash payment.
Could the $50 be reduced?
Yes. The claim form calls the alternate cash payment an estimated $50, subject to a pro rata adjustment based on the amount of valid claims. Pro rata means proportional: the money for this benefit is divided across the claims the administrator approves, so a larger number of approved claims reduces what each person receives. The form does not promise a fixed $50 to every class member. The adjustment is why the notice gives an estimate rather than a guaranteed amount, and it is applied after the administrator finishes counting valid claims. No documentation is required for this payment.
Who is included?
People who live in the United States and were sent a notice that their private information may have been compromised in the data incident affecting Johnson Controls, Inc. The form places the incident from approximately February 1, 2023 through September 30, 2023. The case is In re Johnson Controls, Inc. Data Incident Litigation, Lead Case No. 25-cv-00955-BHL, in the United States District Court for the Eastern District of Wisconsin. A class member ID from the notice is helpful but not required. The administrator's site is www.johnsoncontrolsdatasettlement.com. If your address changes after you file, the form asks you to update it through the Contact Us page on that site and to include your class member ID and telephone number.
When is the deadline?
Submit the claim online at www.johnsoncontrolsdatasettlement.com, or mail it so it is postmarked by February 1, 2027. Online submission and a timely postmark are the two ways the form accepts a claim. The mailing address on the form is In re Johnson Controls, Inc. Data Incident Litigation, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324. A claim that misses the postmark date is late. The form says to type or print in blue or black ink, and to tell the administrator if your contact information changes after you submit it.
Related settlements
Mortgage Investors Group (MIG) Data Breach Settlement
Up to $45 · Deadline November 19, 2026
CVS Digital Privacy Class Action Settlement
Up to $5 · Deadline November 16, 2026
Neutrogena Skin360 Class Action Settlement
Up to $250 · Deadline November 25, 2026
Dr. Squatch Class Action Settlement
Up to $12.5 · Deadline November 27, 2026