TSMC confirms employee data taken via cloud provider
Original title: TSMC confirms employee data breach tied to cloud service provider
TSMC says its own systems and customer data were not involved; a forum post offered 6.9 GB for about $200,000.
Taiwan Semiconductor Manufacturing Company told the SEC that a cloud service provider was breached and data on current and former employees was stolen. The company says an investigation found no compromise of TSMC systems and that the data is unrelated to operations or customers. It is notifying affected staff and working with the unnamed vendor, authorities, and a third-party cybersecurity firm. A November 8 cybercrime-forum post offered 6.9 GB said to include contact, identification, and banking details for 3 BTC.
Unconfirmed: TSMC has not confirmed the seller’s claim that the 6.9 GB includes banking details.
- The cloud service provider was not named.
- CFO Wendell Huang said impacted personnel are being informed.
- The seller demanded 3 BTC, about $200,000.
- TSMC did not comment on the forum post’s specifics.
- The company reported $122 billion revenue last year and over 70% semiconductor market share.
Impact: Employee data held by an unnamed cloud provider
- Victims
- TSMC
- Organizations
- Securities and Exchange Commission
- Countries
- Taiwan
From the original article
1 min read at therecord.mediaAn investigation into the breach found that no TSMC systems were compromised but the information was “verified to match data stored in the system services of a cloud service provider, but is unrelated to the company’s operations or customer-related data.”
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.