Foxconn confirms cyberattack impacting North American factories

Taiwanese electronics manufacturer Foxconn said factories in North America are resuming their normal production cycles after a cyberattack affected several facilities. 

A spokesperson for the company confirmed the incident but declined to provide specifics on how many factories in North America were impacted. Foxconn has factories in Wisconsin, Ohio, Texas, Virginia, Indiana and several across Mexico.

“The cybersecurity team immediately activated the response mechanism and implemented multiple operational measures to ensure the continuity of production and delivery. The affected factories are currently resuming normal production,” the spokesperson said.

On Monday, the Nitrogen ransomware gang took credit for the attack, claiming to have stolen 8 terabytes of data and millions of files that include technical information from several prominent tech firms. 

An employee at one of Foxconn’s Wisconsin factories told DysruptionHub that they began dealing with Wi-Fi issues on Friday and were sent home due to the network outages. Computers were not working and employees had to use paper and pen for several different tasks. At the time, Foxconn confirmed to the news outlet that it was dealing with technical issues and had implemented emergency response mechanisms.

Foxconn reported $258.3 billion in revenue in 2025 and is considered the world's largest contract manufacturer of electronics — making products for companies like Apple, Google, Microsoft, Cisco and others. 

The company has been repeatedly targeted by ransomware gangs over the years. Its semiconductor segment was attacked by the LockBit ransomware gang in 2024. 

The same cybercriminal group targeted Foxconn’s Mexican manufacturing factories in 2022 and another ransomware gang attacked other facilities in Mexico in 2020. 

Cybersecurity experts believe the Nitrogen ransomware strain was created using a builder based on the now-defunct Conti ransomware. Researchers at Barracuda Networks said Nitrogen “is a sophisticated and financially motivated threat group that was first observed as a malware developer and operator in 2023.”