The Department of Homeland Security (DHS) is investigating a ransomware attack on government contractor Johnson Controls International (JCI). The company holds contracts with clients in education, healthcare, the naval and transportation sectors, and with government agencies like the DHS and the Department of Defense.

The DHS intends to determine whether sensitive physical security information, such as floor plans, was compromised in the attack on JCI. Reportedly, the initial breach occurred at JCI’s Asia offices.