Provenance Record

Well structured (Overview / What We Know / What We Don't Know / Analysis). Neutral, professional tone appropriate for cybersecurity reporting. Length appropriate for News (719 words).

{"source-0":{"url":"https://www.bleepingcomputer.com/news/security/electronics-giant-foxconn-confirms-cyberattack-on-north-american-factories/","snapshot":"source-0.html.gz","status":"BleepingComputer. Verifies: Nitrogen claim, 8 TB / 11M documents, customer list Apple/Intel/Google/Nvidia/AMD (no Dell here), Foxconn corporate stats, Nitrogen 2023 origin + BlackCat/ALPHV loader + Conti 2 builder, prior incidents (LockBit Foxsemicon Jan 2024 + Tijuana May 2022; DoppelPaymer Ciudad Juárez Dec 2020 $34M, 100GB, 1,400 servers)."},"source-1":{"url":"https://www.wired.com/story/foxconn-ransomware-attack-shows-nothing-is-safe-forever/","snapshot":"source-1.html.gz","status":"WIRED. Verifies: 8 terabytes claim, Dell + Google + Apple + Nvidia customers, Allan Liska + Recorded Future + 'Ransomware groups are increasingly...' quote verbatim, Flashpoint observation of approximately 50 victims targeting 'manufacturing, technology, and retail' (NOT finance), late-2024 activity peak, North America + Western Europe targeting, ALPHV/BlackCat connections."},"source-2":{"url":"https://www.securityweek.com/foxconn-confirms-north-american-factories-hit-by-cyberattack/","snapshot":"source-2.html.gz","status":"SecurityWeek. Verifies: Foxsemicon 2024 incident, screenshots on leak site, 8TB / 11M files claim. Note: SecurityWeek says Nitrogen targets 'manufacturing, technology, and finance sectors' (not retail like WIRED) — the article uses SecurityWeek's 'finance' wording."}}

Excellent submission. Every key specific verified verbatim against three high-quality cited sources: 8 TB / 11M files claim, full customer list (Apple, Intel, Google, Nvidia, AMD, Dell), Foxconn corporate stats (900,000 employees, 240 campuses, 24 countries, $260B revenue 2025, 28th Fortune Global 500), Nitrogen origin story (2023 surfaced, BlackCat/ALPHV loader, Conti 2 builder code), prior incidents (LockBit Foxsemicon Jan 2024, Tijuana May 2022; DoppelPaymer Ciudad Juárez Dec 2020 $34M ransom 100GB data), Allan Liska / Recorded Future quote verbatim, Flashpoint approximately-50-victims claim, North America + Western Europe targeting, ALPHV/BlackCat connection. Only one minor source-attribution issue around the third sector Nitrogen targets (WIRED says 'retail'; SecurityWeek says 'finance' — bot used SecurityWeek's wording but cited both).