INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Foxconn hit by cyberattack, ransomware crew claims stolen confidential files

| 2026-05-12 22:02 HIGH LOW RANSOMWARE & EXTORTION DATA BREACH
Executive Summary
AI-generated
On May 12, 2026, the Taiwan-based company Foxconn confirmed a cyberattack affecting its North American operations after the Nitrogen ransomware gang claimed to have breached and stolen 8 TB of data comprising over 11 million files. The attack is believed to be linked to previous incidents in 2022 when the same criminal crew hit a Foxconn subsidiary in Mexico, and in 2024 when LockBit claimed to have infected Foxsemicon Integrated Technology, a semiconductor equipment manufacturer within the Foxconn Technology Group. Nitrogen ransomware criminals also listed Apple, Nvidia, Intel, Google, Dell, among others as affected companies on their data leak site. The attack's current status is that affected factories are resuming normal production after implementing operational measures to ensure continuity of production and delivery.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
ContiConti
Target & Sectors
TW MX
manufacturingmanufacturing
Incident Timeline
‎2026/05/12
The Taiwan-based electronics manufacturer Foxconn confirmed a cyberattack affecting its North American operations after the Nitrogen ransomware gang claimed to have stolen confidential Apple and Nvidia files.
data_breach 8 TB
data_breach 11 files
Tactical Metrics
Metrics
data_breach
8
Tb
Metrics
data_breach
11,000,000
Files
Intelligence Sources