Foxconn Faces Major Ransomware Attacks from LockBit and Nitrogen Groups
Severity: High (Score: 69.0)
Sources: blog.barracuda.com, Cybernews, www.lionic.com, Theregister, www.tmj4.com
Summary
In May 2026, Foxconn confirmed a cyberattack affecting its North American operations, attributed to the Nitrogen ransomware gang, which claimed to have stolen 8TB of data, including 11 million files related to major clients like Apple and Nvidia. This follows a previous attack in early 2024 by the LockBit group, which also targeted Foxsemicon, a subsidiary of Foxconn, stealing sensitive data and hijacking its website. The attack vectors for both incidents included sophisticated ransomware methods, with LockBit exploiting vulnerabilities through email attachments and Nitrogen leveraging a similar approach. Foxconn has activated its emergency response mechanisms to mitigate the impact and ensure operational continuity. The company has not confirmed the specifics of the data breach claims made by Nitrogen. The ongoing threats highlight the increasing risks faced by major manufacturers in the tech supply chain. Key Points: • Foxconn confirmed a cyberattack by the Nitrogen ransomware gang, claiming 8TB of stolen data. • The attack affects major clients including Apple and Nvidia, with 11 million files reportedly compromised. • This incident follows a previous ransomware attack by LockBit in early 2024 on Foxsemicon.
Key Entities
- Data Breach (attack_type)
- Ransomware (attack_type)
- Foxconn (company)
- Foxsemicon Integrated Technology (company)
- Mexico (country)
- Taiwan (country)
- Manufacturing (industry)
- Conti (ransomware_group)
- Alphv (ransomware_group)
- Lockbit (ransomware_group)
- Nitrogen (ransomware_group)
- Nitrogen Ransomware Gang (ransomware_group)
- T1041 - Exfiltration Over C2 Channel (mitre_attack)
- T1486 - Data Encrypted for Impact (mitre_attack)
- T1566.001 - Spearphishing Attachment (mitre_attack)
- T1567 - Exfiltration Over Web Service (mitre_attack)
- VMware ESXi (platform)