Nitrogen Claims Foxconn Wisconsin Breach Exposed 8TB of AI Manufacturing Data
Threat Actor Intelligence · 4 sources · Updated 5mo ago · First seen May 25, 2026

Foxconn said operational IT issues disrupted its Mount Pleasant, Wisconsin campus, where workers reported a broad network outage affecting Wi‑Fi, core infrastructure, and timekeeping systems as production was gradually restored. The Nitrogen ransomware group later claimed responsibility on its extortion site, alleging it stole 8TB of data spanning more than 11 million files from the Racine County facility, including assembly instructions, hardware schematics, and data center topology diagrams tied to customers such as Apple, Intel, Google, NVIDIA, and Dell. Foxconn has not verified the authenticity of the leaked samples or disclosed any ransom demand, and reports said the incident may also have affected a Foxconn site in Houston.
The claimed breach adds to a pattern of ransomware incidents affecting Foxconn manufacturing operations. In 2022, Foxconn confirmed a ransomware attack at its Tijuana, Mexico plant that disrupted production and was claimed by LockBit, with the company saying recovery was underway and overall business impact would be limited. That attack followed a 2020 intrusion at Foxconn’s Ciudad Juárez facility attributed to DoppelPaymer, underscoring repeated targeting of the company’s production sites and raising renewed supply-chain and industrial espionage concerns around its AI server and electronics manufacturing operations.

