Threat ActorPublished 13 May 2026

Foxconn Confirms North American Factories Hit by Cyberattack

Source SecurityWeek

Description

The Nitrogen ransomware group claims to have hacked the company’s systems, stealing 8TB of data, including confidential documents. The post Foxconn Confirms North American Factories Hit by Cyberattack appeared first on SecurityWeek .

Impact

The attack resulted in the theft of a large volume of sensitive data (8TB, over 11 million files) including confidential documents and schematics related to major global technology companies. This data exposure could have significant intellectual property and operational confidentiality implications. Production continuity was maintained through Foxconn's immediate response, and affected factories have resumed normal operations. There is no indication of ongoing exploitation or ransomware encryption impact beyond the data theft. The incident highlights persistent targeting of Foxconn by ransomware groups but does not specify direct operational disruption beyond the initial attack.

Defensive guidance

Foxconn has already activated its cybersecurity response mechanisms and implemented operational measures to ensure production continuity. The affected factories have resumed normal production. No specific patches or remediation steps are detailed in the available information. Organizations should monitor vendor advisories for updates. Given the nature of the attack involving data theft and ransomware, standard incident response and forensic analysis should be conducted to understand the attack vector and prevent recurrence. No urgent patch or fix is currently confirmed or referenced.

Summary

The Nitrogen ransomware group conducted a cyberattack against Foxconn's North American factories, stealing 8TB of data comprising confidential documents and schematics for major technology companies. Foxconn confirmed the incident and reported that its cybersecurity team responded immediately, implementing operational measures to maintain production continuity. The attackers have publicized proof of their breach on a Tor-based leak site. The group has a history of ransomware attacks involving file encryption and data theft to pressure victims. Foxconn has been targeted multiple times previously, indicating ongoing threat actor interest. No technical details about the attack vector or exploited vulnerabilities are disclosed, nor is there information about available patches or fixes.

References

securityweek.com/foxconn-confirms-north-american-factories-hit-by-cyberattack/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 13 May 2026, 17:21 UTC

References

Community reviews