Skip to content

Foxconn Wisconsin production halt raises cyber questions

Internal notices and public posts reviewed by DysruptionHub cite several days of network issues, but Foxconn has not confirmed a cyberattack.

Exterior of Foxconn’s Mount Pleasant facility with a Foxconn Industrial Internet sign in front of the building.
Foxconn’s Mount Pleasant facility in Racine County, Wisconsin. (Photo courtesy of Foxconn)

Foxconn’s Wisconsin operation appears to have halted production after several days of network issues that disrupted company operations, according to internal notices and public Facebook posts reviewed by DysruptionHub.

The disruption raises questions about a possible cybersecurity incident at Foxconn’s Mount Pleasant site, the center of its Wisconsin manufacturing operations. Recent state and company announcements have tied the site to AI servers, data infrastructure and a planned Racine County expansion.

The notices said ongoing “network issues” were affecting operations and that the company could not continue normal activities. One said operations would remain closed for the rest of the day “to ensure the safety, efficiency, and integrity” of company processes.

A separate notice said there would be no first-shift production Tuesday, May 5, because of continued network issues.

Public Facebook posts reviewed by DysruptionHub included accounts from people who said the disruption had been ongoing since Friday and that the facility was closed Sunday. DysruptionHub has not independently confirmed those accounts. Another internal notice was said to have been sent at about 3:05 a.m. Central time Monday.

Redacted Facebook post saying the outage had been ongoing since Friday, with an attached internal notice stating operations were closed because of network issues.
A redacted public Facebook post reviewed by DysruptionHub included an internal notice saying Foxconn operations would remain closed because of ongoing network issues. DysruptionHub has not independently verified the notice through Foxconn.

Foxconn has not publicly confirmed a cybersecurity incident, ransomware attack, data theft or ransom demand. The notices use the terms “network issues” and “IT” work, not cyberattack.

DysruptionHub emailed Foxconn’s media office seeking confirmation of the work stoppage, timeline, affected systems, production status and whether the company is investigating the outage as a cybersecurity incident. The story will be updated with any response.

The available indicators point to a suspected cybersecurity incident because the outage appears to have affected operations and production, rather than a narrow public website or local connectivity issue. That assessment is based on operational symptoms, internal notices and public worker accounts, not confirmation from Foxconn.

Chip in once
If this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.

Tip us

Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone.

Become a Supporter

Foxconn has previously dealt with ransomware at Mexican facilities. A 2020 DoppelPaymer attack affected a Foxconn-owned facility in Ciudad Juárez tied to its North America operations, and a 2022 ransomware incident disrupted production at its Foxconn Baja California factory in Tijuana. No ransomware claim or attack type has been confirmed in the Wisconsin outage.

No public ransomware claim tied to the Wisconsin outage was found in open web searches reviewed by DysruptionHub. Officials have not said whether any systems were encrypted, whether manufacturing equipment was affected, whether data was accessed or whether law enforcement was notified.

As of publication, Foxconn had not publicly explained when the network issues began, what caused them, whether normal production had resumed or whether it is treating the outage as a cybersecurity incident.

Attribution note: DysruptionHub credits upstream reporting and primary sources—see citations above. If this report informed your coverage, please cite DysruptionHub with a link.
DysruptionHub Staff

DysruptionHub Staff

A collaborative project to bring you the latest cyberattacks impacting the availability of services and goods in the United States.

All articles

More in Private Sector

See all

More from DysruptionHub Staff

See all