TSMC confirmed that personal data belonging to some current and former employees was exposed without authorization, after a hacker offered an alleged database of 46,000 employee records for 3 BTC on an underground forum. The advertised database was said to contain 6.9GB of data.
Why it matters
The chipmaker said its preliminary investigation linked the leak to a third-party cloud provider's system, rather than an intrusion into TSMC's internal IT infrastructure. The incident highlights how employee information can be exposed through outside services even when a company's own systems are not breached.
Market impact
TSMC said production operations and customer data were unaffected. It is notifying impacted employees and working with the cloud provider, law enforcement and external cybersecurity firms to investigate.
Source: [黑客开价3枚比特币兜售6.9GB员工资料,台积电回应 — Weixin Official Accounts Platform](https://mp.weixin.qq.com/s/6t3Pe0t4CMC2MSNn3TMpqg)
Frequently asked questions
-
How did TSMC say the employee data was exposed?
TSMC said its preliminary investigation linked the leak to a third-party cloud service provider's system, rather than an intrusion into its internal IT infrastructure.
-
How many employee records were allegedly offered for sale?
The hacker offered an alleged database containing 46,000 TSMC employee records. TSMC confirmed an exposure affecting some current and former employees.
-
What price did the hacker seek for the alleged database?
The alleged 6.9GB database was offered for 3 BTC on an underground forum.
-
Did the leak affect TSMC production or customer data?
TSMC said its production operations and customer data were unaffected.
-
What steps is TSMC taking after the exposure?
TSMC said it is notifying impacted employees and working with the cloud provider, law enforcement and external cybersecurity firms to investigate.
WuBlockchain