2026 Foxconn — Nitrogen ransomware / NA plants; supply-chain OEM IP exposure claimed (~11M docs / ~8 TB)
Data compromised
Actor-marketed technical and business documents (drawings, guidelines, internal instructions) per leak-site narrative summarized by BleepingComputer; bank-statement-class claims appear in criminal copy—field-level attestation incomplete
Technical writeup
On May 13 2026, BleepingComputer reported that Hon Hai / Foxconn confirmed to the outlet that some North American factories suffered a cyberattack, with a spokesperson stating the cybersecurity team activated incident response and that affected sites were resuming normal production. The reporting tied public claims to the Nitrogen ransomware brand, which had marketed roughly eight terabytes of data and more than eleven million documents allegedly spanning confidential customer-oriented materials (press cited Apple, Intel, Google, Nvidia, AMD, and other OEM names as appearing in criminal marketing). Because Foxconn is a tier‑one contract manufacturer for those brands, any theft of program drawings, build instructions, or factory-confidential engineering artefacts is a supply-chain confidentiality event for downstream technology customers, not only an internal Hon Hai outage—distinct from consumer PII mega-leaks yet material to industrial espionage and counterfeit risk. Foxconn’s emailed confirmation characterized scope at the factory level rather than detailing exfiltration categories; treat multi-terabyte and multi-million-document figures as extortion-site assertions pending independent forensic reconciliation separate from the LockBit‑era Mexico plant history already cataloged under the legacy foxconn-lockbit-mexico2022 BreachHistory entry.
Root cause
Ransomware-oriented cyberattack on North American manufacturing sites (Nitrogen claims per press); supply-chain angle—contract-manufacturer environments hold OEM-confidential product and engineering material
References
- https://www.bleepingcomputer.com/news/security/electronics-giant-foxconn-confirms-cyberattack-on-north-american-factories/
- https://www.securityweek.com/foxconn-confirms-north-american-factories-hit-by-cyberattack/
- https://www.cybersecuritydive.com/news/foxconn-confirms-cyberattack-affecting-some-north-american-facilities/820120/