INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Foxconn Confirms Cyberattack Hit North American Factories

| 2026-05-14 14:23 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
A cyberattack on Foxconn's North American factories, attributed to the ransomware group Nitrogen, occurred in May 2026. The attack targeted multiple factories in Mexico, Wisconsin, Ohio, Texas, Virginia, and Indiana, with an estimated 11 million files stolen across 8 terabytes of data. Nitrogen claimed responsibility for the attack on its data leak site, stating it compromised confidential instructions, projects, and drawings from prominent companies including Intel, Apple, Google, Dell, Nvidia, among others. The attackers allegedly stole sensitive information before encrypting systems to exert leverage over Foxconn's operations. As a result of the breach, some factories were disrupted but have since resumed normal production, according to Foxconn's spokesperson.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
ALPHVALPHVContiConti
Target & Sectors
MX TW
manufacturingmanufacturing technologytechnology
Incident Timeline
‎2026/05/14
Nitrogen, a ransomware group targeting organizations in the manufacturing and technology sectors, claimed responsibility for stealing 8 terabytes of data from Foxconn's North American factories.
data_breach 11 files
Nitrogen, a ransomware group that’s known for targeting organizations in the manufacturing, construction and technology sectors, claimed responsibility for the attack on its data leak site and said it stole 8 terabytes of data spanning more than 11…
infrastructure Windows
The group started using stolen code from Conti , another formerly prolific ransomware variant, in 2024 to build its own custom attack tools to hit Windows and VMware server environments, she added.
data_breach 8 terabytes
…somware group that’s known for targeting organizations in the manufacturing, construction and technology sectors, claimed responsibility for the attack on its data leak site and said it stole 8 terabytes of data spanning more than 11 million files.
Tactical Metrics
Metrics
data_breach
8
Terabytes
…somware group that’s known for targeting organizations in the manufacturing, construction and technology sectors, claimed responsibility for the attack on its data leak site and said it stole 8 terabytes of data spanning more than 11 million files.
Metrics
data_breach
11,000,000
Files
Nitrogen, a ransomware group that’s known for targeting organizations in the manufacturing, construction and technology sectors, claimed responsibility for the attack on its data leak site and said it stole 8 terabytes of data spanning more than 11…
Metrics
infrastructure
‎Windows
Affected Product
The group started using stolen code from Conti , another formerly prolific ransomware variant, in 2024 to build its own custom attack tools to hit Windows and VMware server environments, she added.
Intelligence Sources
CyberScoop 2026-05-14