TSMC confirmed that personal data belonging to some current and former employees was disclosed without authorization. An unknown seller claimed to hold 46,000 employee records in a 6.9 GB archive and demanded 3 BTC, but the full set of records and its stated size have not been independently verified.
TSMC said the exposed data matched information held by a third-party cloud provider. It found no evidence that its own systems had been breached and said production and customer information were unaffected. The company had not determined how many employees were affected or how the data was obtained; it has begun notifying affected employees and is investigating with the provider, law enforcement and cybersecurity experts.
