Mexico
MEX
Ransomware at FOXCONN Mexico facility (Nov 2020)
Media reporting and company statements confirm that over the Thanksgiving weekend of 2020, FOXCONN’s Ciudad Juárez (CTBG MX) facility in Mexico was hit by DOPPELPAYMER ransomware. Reports state approximately 1,200 servers were encrypted, about 100 GB of data was exfiltrated, and 20–30 TB of backups were deleted. Foxconn acknowledged on Nov 29 an attack on an information system supporting some Americas operations, and coverage noted brief production issues at the Mexico plant.
55
Estimated severity
55 / 100
90
Source reliability
90 / 100
Approximate Date
29/11/2020
Targeted Company
FOXCONN
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Mexico
Affected countries
Mexico
Impacted regions
North America · Mexico
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service unavailabilityOperational disruption
Affected sectors
Manufacturing
Affected departments
Information TechnologyProduction & Manufacturing
Attack Profile
Attack types
RansomwareData exfiltrationData destruction
Attributed threat actors
DOPPELPAYMER
Sources
Incident Sources
siliconangle.comhttps://siliconangle.com/2020/12/08/foxconn-plant-mexico-struck-dopplepaymer-ransomware-attackcpomagazine.comhttps://www.cpomagazine.com/cyber-security/doppelpaymer-ransomware-attack-disrupts-foxconns-operations-in-the-americas-hackers-delete-terabytes-of-data-demand-34-milliontherecord.mediahttps://therecord.media/foxconn-mexico-factory-operations-gradually-returning-to-normal-after-ransomware-attack