TSMC confirmed a data breach involving personal information of its current and former employees. The company reported the incident to the U.S. Securities and Exchange Commission on November 12. According to the manufacturer, the leaked information matches records stored within the systems of an external cloud provider.
Unknown actors are offering an archive containing approximately 46,000 records for 3 BTC on dark web forums. The attackers claim the data totals 6.9 GB and threaten to release it publicly if no buyer is found within one week. TSMC has not officially verified the specific volume or the number of records mentioned by the sellers.
The exposed data includes employee names, national identification numbers, and banking details. TSMC stated that the incident did not compromise client information, production secrets, or operational data. The company is currently notifying affected staff and providing support.
To investigate the breach, TSMC is collaborating with law enforcement, cybersecurity experts, and the involved cloud provider. The company has not disclosed the name of the cloud service provider or the specific method used to access the data. Internal systems of TSMC remain unaffected.
