Johnson Controls International, a leading manufacturer of industrial control systems, said it spent approximately $27 million on responding to and remediating the impact of a significant ransomware attack targeting its network in September last year.