Foxconn Cyberattack Disrupts North American Factories as Nitrogen Claims Data Theft
Threat Actor Intelligence · 9 sources · Updated 5mo ago · First seen May 12, 2026

Foxconn confirmed that a cyberattack affected several of its North American factories, disrupting operations and forcing some facilities to fall back to manual processes while incident response teams worked to restore systems. Reporting tied to a Wisconsin site said the intrusion caused Wi-Fi and network outages, impaired computer operations, and led employees to use paper-based workflows before some were sent home. Foxconn said it activated cybersecurity response and business continuity measures immediately and that impacted plants are resuming normal production and delivery operations.
The Nitrogen ransomware group claimed responsibility, alleging it stole 8 TB of data and more than 11 million documents, including confidential material related to major technology customers such as Apple, Intel, Google, Nvidia, and AMD. Security researchers have described Nitrogen as a financially motivated group first seen in 2023, with ransomware built from leaked Conti 2 code and earlier links to malware used to deploy BlackCat/ALPHV. The incident adds to a string of ransomware attacks previously disclosed by Foxconn, including cases tied to LockBit and DoppelPaymer.

