Smartphone manufacturing giant Foxconn was targeted in a ransomware attack by the DoppelPaymer ransomware group in November 2020 where the attackers stole unencrypted files before encrypting devices
The attackers targeted Foxconn's North America facility and encrypted about 1,200 servers, stole 100 GB of unencrypted files, deleted 20-30 TB Of backups, and shut its website down.
The attackers demanded a ransom of about 1804.0955 BTC that's approximately $34,686,000.
TPRM report: https://scoringcyber.rankiteo.com/company/foxconn
"id": "fox2064622",
"linkid": "foxconn",
"type": "Ransomware",
"date": "11/2020",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"
{'affected_entities': [{'industry': 'Electronics',
'location': 'North America',
'name': 'Foxconn',
'type': 'Manufacturing'}],
'attack_vector': 'Ransomware',
'data_breach': {'data_exfiltration': '100 GB of unencrypted files'},
'date_detected': 'November 2020',
'description': 'Smartphone manufacturing giant Foxconn was targeted in a '
'ransomware attack by the DoppelPaymer ransomware group in '
'November 2020 where the attackers stole unencrypted files '
'before encrypting devices.',
'impact': {'data_compromised': '100 GB of unencrypted files',
'downtime': 'Website shut down',
'operational_impact': '20-30 TB of backups deleted',
'systems_affected': '1,200 servers'},
'motivation': 'Financial Gain',
'ransomware': {'data_encryption': '1,200 servers encrypted',
'data_exfiltration': '100 GB of unencrypted files',
'ransom_demanded': '1804.0955 BTC (approximately $34,686,000)',
'ransomware_strain': 'DoppelPaymer'},
'threat_actor': 'DoppelPaymer ransomware group',
'title': 'Foxconn Ransomware Attack',
'type': 'Ransomware'}