Follow us on Google News
Taiwanese chipmaker TSMC has confirmed unauthorised exposure of employee data, with hackers claiming access to 46,000 records.
The Taiwan Semiconductor Manufacturing Company (TSMC) acknowledged the incident on November 12, stating that information belonging to current and former employees had appeared on an external website without authorisation. Hackers have reportedly demanded three Bitcoin, valued at approximately ₹2 Crore, for the records.
The company maintained that its internal systems had not been compromised and that customer information and business operations remained unaffected.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
What Did TSMC Confirm About the Data Exposure?
TSMC said it had identified employee information made available on an external website without permission. The company confirmed that the exposed information was associated with data stored through the system services of a cloud service provider.
According to the chipmaker, the incident was unrelated to its manufacturing operations or customer-related information. It also stated that its investigation had found no evidence of unauthorised access to its own systems.
The company has begun notifying affected employees and providing necessary assistance. It has also engaged with the cloud service provider, investigating authorities and an independent cybersecurity agency to establish the circumstances surrounding the exposure.
How Much Data Did the Hackers Claim to Obtain?
The hackers claimed to possess approximately 46,000 employee records, amounting to nearly 6.9 gigabytes of information. The records reportedly concern both current and former employees of the semiconductor manufacturer.
The attackers demanded three Bitcoin, estimated at $220,000, in exchange for the information. They also reportedly warned that the records could be publicly released if no buyer came forward within one week.
Reports indicated that the information had been advertised for sale on online forums, including DarkForums and BreachForums. The claims concerning the number of records and the proposed sale originated from the alleged attackers.
What Personal Information Was Reportedly Exposed?
The compromised records reportedly contain several categories of personal and employment-related information, including employee names, national identification numbers, residential addresses, telephone numbers and email addresses.
Banking information, job titles and emergency contact details were also reportedly included in the dataset. Such information concerns employees’ personal identities, financial details and professional records.
The company has acknowledged the unauthorised exposure of employee information but has not confirmed every category of data described in the hackers’ claims. Its statement distinguished the employee data incident from any compromise of customer information or operational systems.
What Action Has TSMC Taken Following the Incident?
TSMC said it was working with its cloud service provider, relevant investigating authorities and a third-party cybersecurity agency to determine the facts and take necessary action. The company has started informing affected personnel and extending support to them. It reiterated its commitment to employee privacy and data security while maintaining that its systems had not been compromised.
The incident has drawn attention to the handling of sensitive employee information stored through external cloud services. While the attackers claim to possess thousands of records, TSMC’s investigation is focused on establishing the circumstances of the exposure and addressing its consequences.
The chipmaker has maintained that its customer data and operations remain unaffected, even as inquiries into the unauthorised publication of employee information continue.
