Foxconn confirms cyberattack after ransomware crew claims it stole confidential Apple, Nvidia files

"“Some of Foxconn's factories in North America suffered a cyberattack,” a Foxconn spokesperson told The Register. “The cybersecurity team immediately activated the response mechanism and implemented multiple operational measures to ensure the continuity of production and delivery. The affected factories are currently resuming normal production.”"

"Nitrogen ransomware criminals on Monday claimed to have breached the Taiwan-based company and stolen 8 TB of data comprising more than 11 million files. The miscreants say the leaks include confidential instructions, internal project documentation, and technical drawings related to projects at Intel, Apple, Google, Dell, and Nvidia, among others."

"Foxconn declined to confirm that these - or any - customers' information was hoovered up in the digital intrusion. Nitrogen, which has been around since 2023, is believed to be one of the various ransomware offshoots that borrowed code from the leaked Conti 2 builder."

"even paying the ransom demand may not guarantee recovery of encrypted files. In February, Coveware researchers warned that a programming error prevents the gang's decryptor from recovering victims' files, so paying up is futile. The finding specifically concerns the group's malware that targets VMware ESXi."

Foxconn confirmed a cyberattack affecting its North American operations after the Nitrogen ransomware gang listed the company on its data leak site. Some North American factories suffered the intrusion, and Foxconn activated its cybersecurity response and implemented operational measures to maintain production and delivery. The affected factories are currently resuming normal production. Nitrogen claimed a breach of the Taiwan-based company and theft of 8 TB of data containing more than 11 million files, including confidential instructions, internal project documentation, and technical drawings tied to projects at Intel, Apple, Google, Dell, and Nvidia. Foxconn did not confirm whether customer information was taken. Coveware previously reported a programming error that prevents the gang’s decryptor from recovering encrypted files, including malware targeting VMware ESXi, making ransom payment potentially futile. Foxconn has faced prior ransomware claims, including LockBit activity involving Foxsemicon and a Mexico subsidiary.

Read at theregister