Electronics manufacturing giant Foxconn has confirmed it suffered a cyberattack that disrupted some of its North American factories. The company, which produces devices and components for Apple, Google, Nvidia, and Sony, said the affected facilities are now resuming normal operations.
The incident highlights the growing cybersecurity risks facing the global tech supply chain. Foxconn’s role as a critical manufacturer for major tech companies means any disruption could potentially impact product availability and expose sensitive information across multiple brands.
The Nitrogen ransomware group claimed responsibility for the attack through a statement on its dark web leak site. The hackers say they stole over 11 million files containing confidential information from Foxconn customers including Apple, Dell, Google, Intel, and Nvidia.
To support their claims, the group published what appear to be product schematics, internal guidelines, and bank statements. This marks a significant breach given Foxconn’s access to sensitive design information and manufacturing data from the world’s biggest tech companies.
Nitrogen operates as a double-extortion ransomware group, meaning they employ two tactics to maximize their profits:
- Encrypting victim files to make them inaccessible
- Stealing data before encryption to threaten public release
This dual approach creates additional pressure on victims to pay ransoms, as companies face both operational disruption and potential data exposure. The strategy has become increasingly common among cybercriminal groups targeting large corporations.
The attack comes at a time when ransomware groups are increasingly targeting supply chain companies to maximize impact. By hitting a single manufacturer that serves multiple major brands, hackers can potentially access data from numerous high-value targets while disrupting production across the industry.
Foxconn has not responded to questions about the specific scope of the breach or whether customer data was compromised. The company’s confirmation suggests the incident was serious enough to disrupt manufacturing operations, though production appears to be recovering.