- Foxconn suffers ransomware attack affecting multiple US facilities, forcing some staff to use pen and paper or stay home
- Nitrogen group claimed responsibility, saying they stole 8TB of confidential data and posted it on their leak site
- Stolen files allegedly include technical documents and schematics tied to Intel, Apple, Google, Dell, Nvidia, and more
Foxconn has confirmed suffering a ransomware attack recently in which the company allegedly lost terabytes of sensitive information.
The attack apparently affected multiple facilities across the United States, and even forced some employees to go back to pen and paper for their day-to-day operations. Others were sent home until the issue was resolved.
A company spokesperson confirmed the incident, but declined to share key details. Therefore, we don’t know which facilities were hit, how many people were affected, or what kind of data was stolen during the raid.
Nitrogen claims the breach
“The cybersecurity team immediately activated the response mechanism and implemented multiple operational measures to ensure the continuity of production and delivery. The affected factories are currently resuming normal production,” the spokesperson said.
In the United States, Foxconn operates factories in Wisconsin, Ohio, Texas, Virginia, and Indiana.
A ransomware group called Nitrogen claimed the breach, saying they stole eight terabytes of data and millions of technical information files from multiple high-profile technology firms.
Specifically, the stolen data reportedly includes confidential instructions, internal project documentation, and technical drawings related to projects at Intel, Apple, Google, Dell, and Nvidia, among others. Nitrogen also said they stole schematics and confidential customer documents, all of which were allegedly posted on its “shaming site”.
The attack reportedly started on Friday, when employees reported issues connecting to the Wi-Fi. Some were sent to work from home, while others were given pens and papers.
Foxconn has a long history of ransomware attacks. In late May 2022, the company confirmed a ransomware incident at one of its Mexico-based production plants and before that, the same thing happened in December 2020. The first attack was done by DoppelPaymer, and the second one by LockBit. Both groups are now defunct.
Via The Record
