Foxconn Ransomware Attack Shows Nothing Is Safe Forever

"A ransomware group is attempting to extort the electronics manufacturing giant Foxconn, claiming that it stole 8 TB of data from the company, including schematics and project details from customers including Dell, Google, Apple, and Nvidia. Foxconn did not immediately respond to WIRED's request for comment about the validity of the claims, but the company did acknowledge that some of its North American factories "suffered a cyberattack" in recent days, and that "affected factories are currently resuming normal production" after outages."

"Foxconn is the type of target that is particularly appealing to ransomware and data extortion actors, because it is a massive company with divisions and subsidiaries around the world that not only hold its own intellectual property, but that of its customers. The company is a key manufacturing contractor for electronic components or entire devices, including Apple's iPhones."

""Ransomware groups are increasingly targeting victims that can impact the supply chain, whether it is physical or software," says Allan Liska, a threat intelligence analyst at security firm Recorded Future. "So it's unsurprising that a company like Foxconn would be targeted since it does manufacturing and holds sensitive data for so many companies around the world.""

"The attackers, known as the Nitrogen group, listed Foxconn on its breach site on Monday. Nitrogen, which emerged in 2023, is not the most high-profile or prolific ransomware actor, but it has been steadily active with some spikes, including at the end of 2024. The group also has connections to the notorious ALPHV/BlackCat ransomware group."

A ransomware group known as Nitrogen claims it stole 8 TB of data from Foxconn, including schematics and project details belonging to customers such as Dell, Google, Apple, and Nvidia. Foxconn acknowledged that some North American factories suffered a cyberattack and said affected factories are resuming normal production after outages. Foxconn is considered an attractive target because it operates globally, holds its own intellectual property, and also stores sensitive customer data as a major manufacturing contractor for electronic components and devices. Ransomware and data extortion actors increasingly target organizations that can disrupt supply chains. Nitrogen emerged in 2023, has been active with spikes, and has connections to ALPHV/BlackCat. Foxconn has previously faced extortion attempts, including attacks involving DoppelPaymer and LockBit.

Read at WIRED