TSMC Says It Found No Evidence Its Systems Were Breached
TSMC Hacked
A filing with the SEC addresses reports of a hack at TSMC, but the company states it has found no evidence that its systems were compromised. The data in question was verified to match information stored in a cloud service provider's system services, yet it is unrelated to TSMC's operations or customer data. Commenters on Hacker News dismissed the disclosure as a perfunctory filing rather than a confirmed breach.
Currently, we have found no evidence that TSMC's systems have been compromised. This information has been verified to match data stored in the system services of a cloud service provider, but is unrelated to the company's operations or customer-related data.
- SamInTheShell
"TSMC Hacked" is misleading here. They clearly state they haven't found signs of their system being hacked, what they've found is employee data is out in the wild. Possibly thirdparty.
Learn to read and don't spread these editorial title lies.
A better title: "TSMC reports employee data found in public to SEC" or something like that.
- aurareturn
TSMC has found that some of our current and former employee data was made available on an external website without authorization. Currently, we have found no evidence that TSMC’s systems have been compromised. This information has been verified to match data stored in the system services of a cloud service provider, but is unrelated to the company’s operations or customer-related data. We have been informing impacted personnel and are providing them with necessary support. TSMC has engaged with both the cloud service vendor, the relevant investigating authorities, and a third-party cybersecurity agency to jointly ascertain the facts and take necessary actions. We remain firmly committed to protecting employee privacy and safeguarding data security.
I'm guessing they used 3rd party HR software and that software got hacked.
- tristanj
Better article: https://wccftech.com/taiwan-chip-giant-tsmc-acknowledges-hac...
Hackers have posted claims on two dark-web forums about having access to internal TSMC data. The compromised files are 6.9GB in size, and they cover roughly 46,000 employee records. The hackers demand three Bitcoins ($206,000) as ransom for not releasing the details publicly. To prove their claim, they posted a file titled "tsmc.txt" with details about 499 TSMC employees. These details include addresses, bank account numbers and emergency contact details of employees.
Based on the leaked data posted, it looks like a third-party cloud provider was hacked, not TSMC itself.