The Nitrogen ransomware group successfully attacked Foxconn's North American factories, exfiltrating over 11 TB of sensitive data including confidential client documents. Foxconn's cybersecurity team activated incident response measures to restore production continuity, and affected facilities are now resuming normal operations. This incident highlights the persistent threat of ransomware to critical manufacturing infrastructure, as Foxconn has been targeted by multiple groups including LockBit and DoppelPaymer in the past.
Ransomware Foxconn factories resume operations after ransomware attack May 14, 2026 Share By SC Staff Foxconn, the world's largest electronics manufacturer, has confirmed that some of its North American factories are working to resume normal operations following a cyberattack. The incident was disclosed after the Nitrogen ransomware operation claimed to have stolen 8 TB of data from the company, with further coverage provided by Bleeping Computer. The attack impacted Foxconn's North American facilities, with the Nitrogen ransomware group claiming to have exfiltrated over 11 million documents, including confidential project details and drawings from major clients like Apple, Intel, Google, and Nvidia. Foxconn stated its cybersecurity team activated response measures to ensure production continuity, and affected factories are now resuming normal operations. The Nitrogen group, which emerged in 2023, has previously used a malware loader and developed its own ransomware strain, though some versions have reportedly contained coding errors. This is not the first time Foxconn has been targeted; previous ransomware attacks include incidents involving LockBit, DoppelPaymer, and an earlier attack on a Foxconn plant in Mexico in 2022. Source: Bleeping Computer An In-Depth Guide to Ransomware Get essential knowledge and practical strategies to protect your organization from ransomware attacks. Learn More SC Staff Related Phishing Cofense unveils AI-driven platform to combat polymorphic phishing campaigns SC Staff May 14, 2026 The company's latest offerings focus on campaign-level responses rather than individual email analysis. Vision 3.2, a key component, utilizes clustering and pattern matching to detect sophisticated attacks that vary content, senders, and delivery methods. Breach BWH Hotels confirms cyberattack impacting customer data SC Staff May 13, 2026 The cyberattack on BWH Hotels, which operates under brands like Best Western, WorldHotels, and SureStay Hotels, compromised customer names, email addresses, phone numbers, and postal addresses. Malware New CRPx0 malware campaign uses OnlyFans lure for crypto theft and ransomware SC Staff May 13, 2026 The CRPx0 campaign, analyzed by Aryaka Threat Research Labs, uses a malicious zip file containing a shortcut that appears to lead to free OnlyFans accounts. Related Events Cybercast Ransomware reloaded: Finding resilience when attackers wield AI On-Demand Event Virtual Conference Ransomware Resilience: Strategies to Defend, Mitigate, and Recover On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe You can skip this ad in 5 seconds