A cloud services provider working with TSMC has been hacked, the chipmaker confirmed. Hackers posted purported data on underground web forums and demanded three Bitcoins as ransom, threatening to release the information if not paid. TSMC told UDN that its internal systems were not compromised.
The compromised files total 6.9GB and cover roughly 46,000 employee records. Hackers posted a file titled "tsmc.txt" with details about 499 TSMC employees, including addresses, bank account numbers, and emergency contact details. TSMC stated the breach was from a cloud service provider and unrelated to production systems or customer information.
TSMC is working with affected employees, cloud providers, investigators, and cybersecurity organizations. The incident follows a 2023 ransomware attack on a hardware supplier demanding $70 million. As a global leader in advanced semiconductor research, packaging technologies like CoWoS, and leading-edge manufacturing such as the 2-nanometer node, TSMC's security matters to the entire tech industry.
