Hacker offers '46,000 TSMC employee records' for 3 bitcoin; TSMC confirms some staff data leaked, apparently via a cloud vendor

TSMC, the world's largest contract chipmaker, confirmed on Thursday that personal information about some of its employees has leaked online.

Here's how it surfaced. According to Taiwan's Economic Daily News, a hacker named TSMC in posts on DarkForums and BreachForums, underground forums where stolen data is bought and sold. The seller claimed to have about 46,000 detailed employee records totaling 6.9 GB, asked for 3 bitcoin (about NT$7.4 million, or roughly $230,000), and threatened to release everything free if no buyer appeared within a week. To win over buyers, the seller posted a sample file called "tsmc.txt" said to contain 499 records with 19 fields each: name, date of birth, job title, nationality, ID number, home address, mobile number, email, bank information, and emergency contacts' phone numbers and addresses. These details come from the hacker and from media descriptions of the sample; whether all 46,000 records are genuine hasn't been verified.

TSMC responded the same day, confirming that information on some current and former employees "was placed on an external website without authorization." The company made three points. Its initial review found the data matches information held in systems run by an unnamed cloud service provider. There's currently no evidence TSMC's own systems were breached. And the leaked material has nothing to do with production or customer data. TSMC said it has been notifying affected people and is working with the cloud provider, investigators and outside cybersecurity firms to find the cause. It hasn't said how many people are affected or which vendor is involved.

One idea worth understanding here is the "third-party breach." Big companies often guard their own networks tightly, but they hand HR, payroll, recruiting and expense tasks to outside software and cloud providers, which means employee data sits in systems the company doesn't directly run. Attackers who can't get into the main company go after these weaker links in the supply chain. TSMC's statement shifts the focus from its fabs to how an outside vendor handled the data.

Why it matters: TSMC makes the most advanced chips for companies like Apple and Nvidia and sits at the center of the global AI supply chain. Based on what's been disclosed so far, the leak involves employees' personal details, not chip designs, manufacturing processes or customer orders, and production isn't affected. The worry security experts raise is what comes next. A complete list of names, phone numbers, home addresses and emergency contacts is exactly what scammers need to impersonate banks, HR departments or relatives and run tailored fraud against employees and their families. It could also be used for phishing aimed at specific engineers as a way to get closer to sensitive information.

What it means for you: first, your data is only as safe as every outside vendor and cloud service your employer uses, not just the employer itself. Second, if you get a suspicious call or text claiming to be from your company, your bank or a family member, especially one about transferring money or sharing a verification code, check it through an official channel. Turning on multi-factor authentication and changing passwords on important accounts are the most practical steps after any possible leak.

Original sources published: Economic Daily News (udn), Nov 12, 2026, 13:31 Beijing time / 12:31 AM EST; IT Home, Nov 12, 2026, 15:00 Beijing time / 2:00 AM EST