Foxconn Confirms Ransomware Attack on North American Factories

Foxconn confirmed a ransomware attack on its North American factories. The incident occurred on May 11, 2026, and affected facilities in Mount Pleasant, Wisconsin, and Houston, Texas. The Nitrogen ransomware group claimed responsibility and said it stole 8TB of data, including over 11 million files.

Nitrogen group claims 8TB data theft

The stolen data allegedly includes confidential instructions, project documents, and circuit board layouts for Apple, Nvidia, Intel, Google, Dell, and AMD. Nitrogen is a double-extortion group that has been active since 2023 and is based on the Conti 2 ransomware builder. Coveware warned that Nitrogen's ESXi encryptor has a bug that makes file recovery impossible even if the ransom is paid.

A Foxconn spokesperson said the cybersecurity team immediately activated the response mechanism and implemented multiple operational measures to ensure production and delivery continuity. The affected factories are currently resuming normal production.

This is Foxconn's third major ransomware attack since 2020. Foxconn has not confirmed whether customer data was actually taken and declined to answer specific questions on the subject.