Apple supplier Luxshare: Hackers steal product data

A cyberattack on a key Apple supplier has apparently had more far-reaching consequences than initially known. It is now clear that the affected company is the Chinese contract manufacturer Luxshare. More than one terabyte of sensitive data is said to have been compromised, including confidential Apple information from development and production. The incident raises questions about the security of global supply chains and the protection of secret product plans.

It was revealed in December that an Apple supplier had fallen victim to a serious cyberattack. At the time, however, many details remained unclear. Neither the company's name nor the true extent of the compromised data was known. There was also no confirmed information regarding potential impacts on Apple products. Only weeks later did evidence mount that the attack was significantly larger than initially assumed and that particularly sensitive Apple data had been affected.

Cyberattack revealed via the Dark Web

The attack first became public on December 15, 2025, when the ransomware group RansomHub posted a message on a dark web leak site. In it, the attackers stated that they had encrypted Luxshare's internal systems and stolen extensive data. They also threatened to release the information if the company did not enter into negotiations. Luxshare was further accused of keeping the incident internal and failing to be transparent about it.

According to the attackers, Luxshare officials were given a deadline to contact them but did not respond. The perpetrators then published sample data, purportedly as proof of the successful attack. This data allegedly came from archives protected by strict confidentiality agreements.

Scope and type of stolen data

According to the attackers, the stolen material includes detailed 3D CAD product models, high-precision geometry files, classic 2D manufacturing drawings, and design plans for mechanical components. Additionally, circuit board layouts, internal technical PDF documents, and other development-related documents are said to have been stolen.

A significant portion of the archives is said to relate directly to Apple products. Furthermore, it reportedly contains information from other major customers, including Nvidia, LG, Tesla, and Geely. The total data volume is estimated to exceed one terabyte.

Data review by security experts

The Cybernews research team examined parts of the published sample data. They apparently identified genuine internal Luxshare documents that are clearly linked to Apple projects. The materials examined describe, among other things, confidential repair processes, logistical procedures, and the operational collaboration between Apple and Luxshare.

The datasets contain detailed process descriptions, schedules, and project coordination documents. The examples also include common file formats from product development and manufacturing, including .dwg and Gerber files, which are typically used for technical drawings and printed circuit board layouts.

Timeframe and possible new products

The projects mentioned in the sample data span the period from 2019 to 2025. This suggests that not only older or already released products are affected. It is considered likely that the stolen documents also contain information about Apple devices that have not yet been announced.

Additionally, the researchers found that the sample data appears to contain personal information. This includes full names, job titles, and business email addresses of individuals involved in Apple projects.

Risks for Apple and its partners

Access to detailed technical designs and manufacturing documents poses significant risks. Misused data could be used for product reverse engineering or to facilitate the production of counterfeit goods. Targeted attacks on hardware or firmware are also conceivable, given the detailed knowledge of device layouts and the interaction of individual components.

Furthermore, disclosing internal processes and contact information increases the risk of targeted phishing attacks or other cyberattacks. Such follow-up attacks could target not only Luxshare but also other partners within Apple's supply chain.

No official statement

Neither Apple nor Luxshare have officially confirmed or commented on the cyberattack. There is also no public information regarding possible countermeasures or internal investigations. It also remains unclear whether and to what extent the stolen data has already been shared or published.

Security risks in Apple's global supply chain

The cyberattack on Luxshare demonstrates how vulnerable even large and established production networks can be. For Apple, it's not just the protection of individual documents that's at stake, but the security of confidential product developments and internal processes. This incident is likely to increase the pressure to review and strengthen digital security standards throughout the entire supply chain to prevent similar attacks in the future. (Image: Shutterstock / New Africa)