TSMC Hacked

(sec.gov)

110 points | by gmays 7 hours ago ago

17 comments

  • SamInTheShell 3 hours ago ago

    "TSMC Hacked" is misleading here. They clearly state they haven't found signs of their system being hacked, what they've found is employee data is out in the wild. Possibly thirdparty.

    Learn to read and don't spread these editorial title lies.

    A better title: "TSMC reports employee data found in public to SEC" or something like that.

  • aurareturn 5 hours ago ago

        TSMC has found that some of our current and former employee data was made available on an external website without authorization. Currently, we have found no evidence that TSMC’s systems have been compromised. This information has been verified to match data stored in the system services of a cloud service provider, but is unrelated to the company’s operations or customer-related data. We have been informing impacted personnel and are providing them with necessary support. TSMC has engaged with both the cloud service vendor, the relevant investigating authorities, and a third-party cybersecurity agency to jointly ascertain the facts and take necessary actions. We remain firmly committed to protecting employee privacy and safeguarding data security.
    
    I'm guessing they used 3rd party HR software and that software got hacked.
  • tristanj 5 hours ago ago

    Better article: https://wccftech.com/taiwan-chip-giant-tsmc-acknowledges-hac...

    Hackers have posted claims on two dark-web forums about having access to internal TSMC data. The compromised files are 6.9GB in size, and they cover roughly 46,000 employee records. The hackers demand three Bitcoins ($206,000) as ransom for not releasing the details publicly. To prove their claim, they posted a file titled "tsmc.txt" with details about 499 TSMC employees. These details include addresses, bank account numbers and emergency contact details of employees.

    Based on the leaked data posted, it looks like a third-party cloud provider was hacked, not TSMC itself.

    • tom1337 4 hours ago ago

      three bitcoins seems rather cheap?

      • kikdij 4 hours ago ago

        Unless they intend to sell the data anyway.

        • freak42 2 hours ago ago

          There is no need for any correlation of the two.

      • sylware 3 hours ago ago

        china already bought the data and did set up a small team of 1 million competent people to look at those 46000 employees.

        :)

        core TSMC operations should be done on a network physically separated from internet, at best a pure IP "VPN" link to connect 2 of its entities.

        • rat9988 3 hours ago ago

          > china already bought the data and did set up a small team

          Very likely, and same for the US, if they didn't already access the data before this "hack".

  • kikdij 3 hours ago ago

    For those not aware: TSMC is a big deal. It's one of the lead (and few) big semiconductor producers, and probably the main reason why there are so much geopolitical tension around Taiwan.

    • sampullman 3 hours ago ago

      It is relevant to the discussion, but not the main reason for the political tension.

  • 14u2c 7 hours ago ago

    > Currently, we have found no evidence that TSMC’s systems have been compromised. This information has been verified to match data stored in the system services of a cloud service provider, but is unrelated to the company’s operations or customer-related data.

    Perfunctory filing.

  • phyzix5761 2 hours ago ago

    BS title

  • Kushvinth 7 hours ago ago

    Another day; Another Slay

    • Joel_Mckay 5 hours ago ago

      Some tracks are better than others =3

      https://www.youtube.com/watch?v=DN8Y5NhUbUY

    • metalman 4 hours ago ago

      This is hacking the dragon, TSMC has global natsec contacts, ie: other meaner dragons, on top of there own internal capacity. 3 bitcoin?, looks to me like there are 3 of them in the crew, with romantic notions of bieng 'fair' tweeking the dragons tail, and demanding a pitance for creating a huge HR/security cluster fuck that will be persistant no matter what happens next.

      • K0balt 3 hours ago ago

        What do you mean?