TSMC confirms employee data leak via third-party cloud service provider; core systems reportedly not compromised
Matéria consolidada. Reúne 2 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 2 fontes trouxeram em 13/11/2026 12:02; os links antigos trazem para cá.
Fontes: gbhackers.com ↗ securityonline.info ↗
TSMC has confirmed that personal data of current and former employees was exposed through a third-party cloud service provider, not through its own systems. The company found the data on an external website without authorization, and the exposed records match data held by the provider (gbhackers.com). One report says the data was offered for sale for 3 Bitcoin and covers about 46,000 records (securityonline.info). TSMC says it has no evidence that its core network or customer data was compromised, which limits the incident to employee records (securityonline.info). The company is working with the cloud vendor, law enforcement and independent cybersecurity experts to establish the cause, scope and timeline (securityonline.info, gbhackers.com). The incident shows the supply-chain risk that third-party suppliers pose to semiconductor firms.
Detalhes técnicos
- Vector: data held by an unnamed third-party cloud service provider, not a breach of TSMC's internal systems (securityonline.info, gbhackers.com).
- Exposed data reportedly includes home addresses, bank account numbers and emergency contact details (securityonline.info).
- The data appeared on an external website and was reportedly offered for sale for 3 Bitcoin (securityonline.info, gbhackers.com).
- The method of unauthorized access has not been disclosed (gbhackers.com).
Remediação
No specific remediation guidance has been published. TSMC says it is investigating with the cloud vendor, law enforcement and cybersecurity experts. Defenders should treat affected employee data as exposed and watch for targeted phishing and fraud against staff. They should also review the access and security controls of their own cloud and third-party providers.
Relatos divergentes
- Scope and detail: securityonline.info reports about 46,000 records, the data types and a 3 Bitcoin asking price. gbhackers.com, published later the same day, says no details have been provided on the volume or type of data exposed, or on the cloud provider. The record count and sale price therefore remain unconfirmed by TSMC in the available sources.
Linha do tempo
-
TSMC Employee Data Breach Linked to Cloud Provider Exposure, No Internal System Compromise Found
ler a análise desta fonte ocultar
Taiwan Semiconductor Manufacturing Company (TSMC) disclosed a data breach involving personal information of current and former employees found on an external website without authorization. The exposed data matches records stored with a third-party cloud service provider, with no evidence yet indicating compromise of TSMC's own systems. The company is collaborating with the cloud vendor, authorities, and independent cybersecurity experts to investigate the breach's cause, scope, and timeline. No details have been provided about the cloud provider involved, the volume or type of data exposed, or the method of unauthorized access. This incident highlights risks associated with data managed by external providers rather than internal network breaches.
-
TSMC confirms employee data breach from cloud service provider exposing 46,000 records
ler a análise desta fonte ocultar
TSMC has confirmed that personal data of current and former employees was leaked through a third-party cloud service provider that it uses, not from TSMC's own systems. The leaked data, reportedly offered for sale for 3 Bitcoin, contains sensitive employee information including home addresses, bank account numbers, and emergency contact details. TSMC states there is no evidence of compromise of its core network or customer data, limiting the breach to employee records only. The company is working with the cloud vendor, law enforcement, and cybersecurity experts to investigate and respond. This incident highlights the increasing risks posed by third-party suppliers in the semiconductor supply chain.