Foxconn recently suffered from a Ransomware attack that has reportedly damaged its servers and backups. The company is reeling from the attack, which also had sensitive data being stolen.

Foxconn logo

According to a CRN report, Foxconn suffered a ransomware attack on 29th Novermber 2020 in its North American facility, which is located in Ciudad Juarez, Mexico. The attack was from ransomware operator DoppelPaymer, who is now demanding 34.7 million US Dollars in Bitcoin. The ransomware operator even leaked certain generic Foxconn business documents on their data leak website earlier this week.

As per the ransom note, “Your files, backups and shadow copies are unavailable until you pay for a decryption tool,” DoppelPaymer wrote in a ransom note that appears on Foxconn’s servers. “If no contact [is] made in 3 business days after the infection, [the] first portion of data will be shared to [the] public … and all the rest will remain unreachable to you.”

Ransomware Attack Featured

DoppelPaymer apparently encryted about 1,200 servers, stole 100GB of unencrypted files, deleted 20 to 30TB of backups and more in their November 29 attack. The ransom for these files is 1,804 Bitcoins. Foxconn is a known supplier of Apple, and it remains to be seen what action the Taiwanese electronics manufacturer takes in response to this. The ransom note, which is actually a link, also stated that “This page and your decryption key will expire in 21 days after your systems were infected. Sharing this link or email will lead to the irreversible removal of the decryption key.”