Hacker Group Mysteriously Removes Stolen Apple Schematics and Extortion Threat From Ransomware Website - MacRumors
Skip to Content

Hacker Group Mysteriously Removes Stolen Apple Schematics and Extortion Threat From Ransomware Website

A ransomware group that last week stole schematics from Apple supplier Quanta Computer and threatened to release the trove of documents has mysteriously removed all references related to the extortion attempt from its dark web blog, MacRumors can confirm.

Ports 2021 MacBook Pro Mockup Feature 1 copy
The ransomware group known as REvil claimed last Tuesday that it had accessed the internal computers of Taiwan-based Quanta and managed to obtain several images and schematics of unreleased Apple products.

BleepingComputer reported that the group initially demanded Quanta pay $50 million for recovery of the files. However, according to an April 20 statement posted on the hacker group's site, Quanta refused to pay the ransom, which led the criminals to go after Apple for the money instead.

To prove it had hacked into Quanta's servers and in order to turn up the pressure on Apple, the hackers publicly posted a handful of images depicting unreleased product schematics, including details on Apple's unreleased next-generation MacBooks.

The group threatened to publish new data every day leading up to May 1, unless Apple paid the $50 million ransom demand in exchange for deleting the files.

The extortion attempt was timed to coincide with Apple's April 20 "Spring Loaded" digital event, where Apple announced AirTag item trackers, new iPad Pro models, and new iMacs. Despite the threat, however, no additional stolen documents have been leaked online since the original demand was made public.

Historically, REvil isn't known for bluffing and routinely posts stolen documents if its victims don't pay up, so it's unclear why the group has failed to follow through on this occasion, and Apple has so far not commented on the breach. The group actively continues to extort other companies, so what has prompted it to remove all content linked to the Quanta hack remains unknown. We'll update this article if we learn more.

Popular Stories

iOS 26

iOS 26.4 Adds Two New Features to CarPlay

Tuesday March 24, 2026 1:55 pm PDT by
iOS 26.4 was released today, and it includes a couple of new features for CarPlay: an Ambient Music widget and support for voice-based chatbot apps. To update your iPhone 11 or newer to iOS 26.4, open the Settings app and tap on General → Software Update. CarPlay will automatically offer the new features so long as the iPhone connected to your vehicle is running iOS 26.4 or later....
Apple Business hero

Apple Unveils 'Apple Business' All-in-One Platform

Tuesday March 24, 2026 8:53 am PDT by
Apple today announced Apple Business, a new all-in-one platform that unifies device management, productivity tools, and customer outreach features. The service is designed to be a consolidated replacement for several of Apple's existing business-focused offerings, including Apple Business Essentials, Apple Business Manager, and Apple Business Connect. It provides organizations with a single...
AirPods Pro Firmware Feature

Apple Releases New Firmware for AirPods Pro 3, AirPods Pro 2 and AirPods 4

Tuesday March 24, 2026 12:31 pm PDT by
Apple today released new firmware for the AirPods Pro 2, AirPods Pro 3, and the AirPods 4. The firmware has a version number of 8B39, up from 8B34 on the AirPods Pro 3, 8B28 on the AirPods Pro 2, and 8B21 on the AirPods 4. There is no word on what's included in the firmware, but Apple has a support document with limited notes. Most updates are limited to bug fixes and performance...

Top Rated Comments

ArPe Avatar
64 months ago
John Wick did his job. Hope it was a great action scene.
Score: 66 Votes (Like | Disagree)
64 months ago
I just think it would be funny if Apple responded with a message that just contained the names and addresses of people involved and they went “oh ****” and took everything down
Score: 42 Votes (Like | Disagree)
64 months ago

John Wick did his job. Hope it was a great action scene.
I think it was Tim Cook in his mission impossible guise from the recent event. It was a covert threat and now it's mission accomplished.
Score: 33 Votes (Like | Disagree)
applesith Avatar
64 months ago
Look for a $50MM expense on apples next filing. ;)
Score: 27 Votes (Like | Disagree)
ArPe Avatar
64 months ago

Maybe they got caught, but I doubt it. It would be stupid of Apple to pay the ransom - other groups would take notice and make Apple their prime target.
Don’t try to blackmail the richest company in the world.

It won’t end well for you.



Attachment Image
Score: 25 Votes (Like | Disagree)
Spock Avatar
64 months ago
Apple has an internal person that deals with these kinds of people... Clean up on aisle 5.
Score: 24 Votes (Like | Disagree)