CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Foxconn North American operations disrupted by Nitrogen ransomware attack

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Foxconn, the world’s largest electronics manufacturer, confirmed a cyberattack targeting its North American factories, disrupting operations and prompting recovery efforts. The incident was attributed to the Nitrogen ransomware gang, which claims to have exfiltrated 8 TB of data and over 11 million documents containing confidential customer projects and intellectual property. Affected facilities are gradually resuming normal production following immediate incident response measures. The attack highlights ongoing targeting of critical manufacturing supply chains and the growing risk of operational disruption and data theft in high-value electronics sectors.

Timeline

  1. 13.05.2026 15:49 1 articles · 1h ago

    Nitrogen ransomware gang claims Foxconn data theft and disrupts North American operations

    A cyberattack attributed to the Nitrogen ransomware operation has disrupted operations at Foxconn’s North American factories. The threat actor claims to have exfiltrated 8 TB of data and over 11 million documents, including confidential customer projects. Foxconn reports that affected facilities are resuming normal production following incident response measures.

    Show sources
    Open in new tab

Information Snippets

  • Foxconn confirmed a cyberattack impacting its North American factories, with recovery efforts underway to restore normal operations.

    First reported: 13.05.2026 15:49
    1 source, 1 article
    Show sources

  • The Nitrogen ransomware gang claims to have stolen 8 TB of data and over 11 million documents from Foxconn’s infrastructure.

    First reported: 13.05.2026 15:49
    1 source, 1 article
    Show sources

  • Stolen data allegedly includes confidential instructions, projects, and drawings from major Foxconn customers such as Apple, Intel, Google, Nvidia, and AMD.

    First reported: 13.05.2026 15:49
    1 source, 1 article
    Show sources

  • Nitrogen ransomware operation emerged in 2023 as a malware loader deploying BlackCat/ALPHV payloads before developing its own ransomware strain using leaked Conti 2 builder code.

    First reported: 13.05.2026 15:49
    1 source, 1 article
    Show sources

  • A coding error in Nitrogen’s ESXi-targeting malware reportedly causes irreversible file corruption by encrypting data with an incorrect public key.

    First reported: 13.05.2026 15:49
    1 source, 1 article
    Show sources

  • Foxconn has previously been targeted by ransomware, including LockBit attacks on its subsidiary Foxsemicon in January 2024 and a production plant in Tijuana, Mexico, in May 2022.

    First reported: 13.05.2026 15:49
    1 source, 1 article
    Show sources