Reporting in April 2021 described a ransomware attack on Quanta Computer, an Apple supplier—not a confirmed intrusion into Apple’s own network. The attackers, the REvil group, reportedly demanded $50 million and threatened to publish files they said they had stolen. That figure was a reported ransom demand, not evidence that Apple or Quanta paid it or lost that amount.
What happened in the Quanta ransomware attack?
In April 2021, the ransomware operation known as REvil, also called Sodin or Sodinokibi, claimed it had accessed servers belonging to Quanta Computer, a Taiwan-based manufacturer that supplied Apple. Contemporaneous reports said the group displayed Apple product schematics and threatened to release more material.
Quanta publicly acknowledged cyberattacks affecting a small number of its servers. It said its information-security team worked with outside IT experts and relevant authorities, and that the incident had no material impact on business operations. In a statement quoted by BleepingComputer in April 2021, Quanta also said containment and data recovery were underway, some affected services had returned to normal, and it was reviewing and enhancing its security infrastructure. Those are the company’s descriptions of its response and impact, not independent measurements.
Did Apple get hacked?
The reporting describes an attack on Quanta’s servers, not a confirmed breach of Apple’s network. After Quanta reportedly did not pay or engage, REvil turned its pressure toward Apple, seeking payment in exchange for the alleged data. The Guardian reproduced the group’s appeal: “We recommend that Apple buy back the available data by 1 May.” That was the extortion group’s own claim and demand, not an independently verified account of what Apple possessed or what it did.
#1 Best Overall
Recorded Future analyst Dmitry Smilyanets described the customer-directed pressure as “a new approach in the double extortion name-and-shame technique,” in comments quoted by The Record in April 2021. In this case, the reported sequence involved pressure through both threatened publication of stolen files and an attempt to involve the affected supplier’s customer.
Was Quanta hacked for $50 million?
No public evidence in the cited coverage establishes that Quanta paid $50 million. The amount was reported as REvil’s demand—first in its dealings around Quanta and then in its effort to pressure Apple—not a confirmed payment, measured loss, or independently verified damage estimate. The distinction matters: a ransom demand states what an attacker is asking for, not what a victim ultimately paid.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
What Apple designs were reportedly leaked?
Early reports described MacBook-related schematics and component details among the material REvil displayed. The group claimed to possess additional confidential drawings and data, but that claim does not establish the full scope of files taken. Contemporaneous coverage also cautioned that the documents did not show that every depicted item was an unreleased product.
Later reporting in 2021 connected some schematic details with features of the 14- and 16-inch MacBook Pro models Apple announced in October. That reported correspondence is not proof that every file claimed by REvil was authentic, that the files represented the entire set taken, or that the full extent of the alleged theft is known.
Did Apple pay REvil, and what became of the files?
The public record described by contemporaneous and later coverage does not establish whether Apple or Quanta paid, whether a private settlement occurred, or whether negotiations continued. REvil threatened publication by May 1, 2021, then removed its Quanta leak page while reportedly trying to negotiate further. BleepingComputer reported a later reduced demand and additional threats, while noting that it was unclear whether communications continued or negotiations had stalled. Later coverage said the public Apple-related threats faded and the files were removed.
Removal of a public leak page does not establish that every copy of the data was deleted or recovered. The reviewed reporting does not settle the final disposition of all alleged stolen files or the private outcome of the extortion attempt.
Quick Recap
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
Rank #4
What the incident does—and does not—show
- Supplier incident: The reported victim network was Quanta’s. The episode should not be described as a confirmed breach of Apple’s own systems.
- Attacker claims: REvil claimed it stole data and used threatened publication as part of its extortion. The claim and its asserted scope remain attributed to the group and contemporaneous reporting.
- Demand, not payment: The $50 million figure was a reported demand, not proof of payment or a measure of losses.
- Company account: Quanta said a small number of servers were affected, there was no material impact on operations, and it worked with outside experts and authorities. These statements reflect Quanta’s account.
- Unresolved outcome: Public reporting does not establish whether either company paid, the full scope of data taken, or whether all alleged stolen material was recovered or deleted.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
