Hackers Steal 3D CAD Models of Secret Apple Products

Apple is facing a serious security breach after one of its biggest manufacturing partners, Luxshare, fell victim to a massive cyberattack. Reports confirm that a ransomware group has stolen over 1TB of confidential data, including secret plans for upcoming products (via MacRumors).

Luxshare is a key player in Apple’s supply chain. They are the primary manufacturer for AirPods and the exclusive builder of the Apple Vision Pro. Because they work so closely with Apple, they have access to highly sensitive blueprints and engineering files that are usually kept under lock and key.

The group behind the attack, known as RansomHub, claims to have exfiltrated a mountain of data. This includes detailed 3D CAD models, which are digital blueprints used to design the physical shape of Apple products. They also reportedly took circuit board layouts, internal engineering PDFs, and manufacturing drawings.

What makes this particularly worrying is the timeline. The stolen files are said to span from 2019 all the way to 2025 and early 2026. This means the hackers likely have their hands on designs for products that haven’t even been announced yet. If these files are leaked or sold to competitors, it could give the world an early look at the iPhone 18 or next-generation wearable tech.

It isn’t just hardware secrets at risk. The hackers claim the breach includes personally identifiable information (PII) of employees. This includes full names, work email addresses, and job titles of people working on top-secret Apple projects.

For a company like Apple that prides itself on “secrecy as a feature,” this is a nightmare scenario. Having employee details out in the open makes those individuals targets for phishing attacks or corporate espionage.

This isn’t the first time an Apple partner has been targeted, as Quanta Computer faced a similar $50 million ransom demand back in 2021. However, the sheer volume of data in this Luxshare breach, over 1,000 gigabytes, is staggering.

Neither Apple nor Luxshare has officially commented on whether a ransom has been paid.