Skip to content
NewA calmer, faster ZeroHour
StoryData breachhigh

TSMC says employee data posted online via cloud provider

5 sources · 6 articlesFirst reported Updated ()
What's new

November 13: The Record dates the forum offer to November 8, values 3 BTC at about $200,000, and says TSMC told the SEC the cloud provider was breached.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

TSMC says some current and former employees' data appeared online via a cloud provider, with no evidence its own systems were breached.

Taiwan Semiconductor Manufacturing Company said on November 12, 2026 that personal data of some current and former employees was posted without authorization and matches records held by an outside cloud provider. In a Form 6-K signed by CFO Wendell Huang, TSMC said it found no evidence its own systems were compromised and that the data does not involve production, operations, or customers. The Record says TSMC told the SEC the provider was breached and the data was stolen; other outlets say the company has not confirmed how the data left. Sellers offered what they called 46,000 records, about 6.9GB, for three bitcoins. TSMC has not confirmed the count, size, or alleged contents, and is notifying staff while working with the vendor, authorities, and a cybersecurity firm.

Key facts
  • Form 6-K dated November 12, 2026, signed by CFO Wendell Huang.
  • Sellers asked for 3 bitcoin and threatened a full dump within a week.
  • Alleged samples include names, national IDs, and bank accounts; TSMC has not confirmed them.
  • The cloud provider, access method, and number of people affected remain undisclosed.
  • TSMC is notifying affected current and former employees and offering support.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Nov 8, 2026Forum post offered 6.9GB of claimed employee data for 3 BTC. · The Record
  2. Nov 12, 2026TSMC filed a Form 6-K on the employee data posting. · Hacker News

What each outlet adds

beyond the shared facts
  • DataBreaches.netPrice near NT$7.4 million and a one-week full-dump threat.
  • Cyber Security NewsDarkForums and BreachForums named; alleged ID and bank fields unconfirmed.
  • Hacker NewsWccftech and Taiwanese press cited for the 46,000-record figure.
  • The RecordNovember 8 post date, about $200,000, and a stated provider breach.
Victims
TSMCTaiwan Semiconductor Manufacturing Company
Organizations
Securities and Exchange Commission
Countries
Taiwan

Coverage

oldest first · one row per article · UTC
  1. · 1d ago DataBreaches.netFirst report

    TSMC confirms unauthorized release of some employee data

    Sellers offered what they called 46,000 records, 6.9GB, for 3 bitcoin and threatened a full dump within a week.

  2. · 1d ago Cyber Security News

    TSMC confirms employee data exposed via third-party cloud provider

    The chipmaker says its own systems were not breached; a forum claim of 46,000 records for three bitcoins is unverified.

  3. · 1d ago Hacker News · security

    TSMC says employee data was posted from a cloud provider's systems

    TSMC says its own systems, operations, and customer data were not involved and is notifying affected staff.

  4. · 1d ago Hacker News · security

    TSMC says employee data appeared on an external site without authorization

    The chipmaker says the records match a cloud provider's systems, not its own, and exclude operations and customer data.

  5. · 1d ago GBHackers

    TSMC says employee data was published after cloud-provider exposure

    The November 12 filing names no vendor, victim count, or access method, and TSMC reports no compromise of its own systems.

  6. · 22h ago The Record

    TSMC confirms employee data taken via cloud provider

    TSMC says its own systems and customer data were not involved; a forum post offered 6.9 GB for about $200,000.