Overview
- TSMC said on Thursday, November 12, 2026, that personal records for some current and former employees were posted online and that the data match files stored with an external cloud service provider.
- Hackers posted a 499‑record sample called "tsmc.txt," claimed roughly 46,000 total records (about 6.9 GB), and listed the full dataset for sale for 3 BTC with a one‑week deadline.
- TSMC said its internal networks, production operations and customer data were not compromised and that it has informed impacted personnel while engaging the cloud vendor, outside cybersecurity firms and law enforcement.
- The leaked fields reported in the sample include names, national ID numbers, home addresses, phone and email contacts, bank details, job titles and emergency contacts, creating clear risks of identity theft, phishing and targeted poaching.
- Security observers note the incident fits a recurring pattern of attackers exploiting weaker third‑party systems rather than hardened corporate networks and that any Bitcoin payment would leave a public ledger trail useful to investigators.