Foxconn confirms ransomware attack on US factories, 8 TB data stolen by Nitrogen group

Foxconn, the world’s largest contract electronics manufacturer and Apple’s primary iPhone assembler, confirmed that its North American facilities in Mount Pleasant, Wisconsin and Houston, Texas suffered a ransomware attack. The cyber‑crime group Nitrogen claimed to have exfiltrated roughly 8 TB of data, including schematics and project details for customers such as Dell, Google, Apple and Nvidia. Workers reported a full network collapse, with one describing, “We were told to turn off our computers and not log back in under any circumstances,” and noting that “the timecard terminals were dead.”

The attack follows a series of previous incidents targeting Foxconn, including ransomware hits in 2020, 2022 and 2024. Nitrogen, which evolved from a loader operation to an independent ransomware operator, employs a double‑extortion model and has posted sample files on its NitroBlog leak site, though Apple‑related materials have not been identified. The breach raises concerns for downstream customers and the broader electronics supply chain, prompting security advisories on malvertising and supplier‑side access controls.