TSMC confirms data breach as hacker demands Bitcoin worth $215K — Details - AMBCrypto
Taiwan Semiconductor Manufacturing Company (TSMC) confirmed a data breach involving over 46,000 employee records, with hackers demanding 3 Bitcoin, or approximately $214,700, within one week.
The hacker is not using traditional ransomware tactics, as no malware was deployed and TSMC has not been locked out of its systems. Instead, the individual is seeking a buyer for the stolen information, which includes details of current and former employees. The data was disclosed without authorization, but TSMC has not linked it to any clients or production activities.
TSMC has acknowledged the breach and stated that the leaked data matches records from a cloud service provider. The company has initiated an investigation and is collaborating with cloud service providers and cybersecurity agencies to understand the incident. The breach is being treated as a simple data breach rather than a ransomware attack.
Industry context
TSMC is no stranger to ransomware threats, having been targeted by the LockBit group in 2023, which demanded $70 million. The manufacturing sector remains a prime target for cybercriminals, accounting for 22% of all ransomware attacks according to Black Kite’s ransomware report. The report also noted a 24% year-over-year increase in ransomware disclosures, with the threat actor ecosystem growing to 146 active groups by June 2026.
The incident comes at a time when the semiconductor industry is already under scrutiny, particularly following the resignation of Nvidia CEO Jensen Huang. The timing has drawn attention away from TSMC, which is a critical partner for Nvidia and other major chipmakers. The breach has not directly impacted TSMC’s operations or client relationships, but it highlights the ongoing security challenges facing the sector.
Next steps
TSMC is actively working to secure its systems and prevent future breaches. The company has emphasized that no client or production data was involved in the incident. The hacker’s deadline of one week remains in effect, and the outcome of the situation will depend on whether TSMC or another party engages with the threat actor. The case underscores the need for robust cybersecurity measures in the semiconductor industry.
Related
