Taiwan Semiconductor Manufacturing Company (TSMC) confirmed on November 12 that personal information from current and former employees had appeared online without authorization. The company's internal review found no evidence of a breach in its own systems, determining instead that the leaked records matched data held by a cloud provider.
According to reports, a hacker requested 3 BTC, valued at approximately $220,000, for a database claimed to contain 46,000 employee records. The hacker claimed to possess 6.9 GB of data and threatened to publish it within a week if no buyer was found. No payment has been publicly verified as of the time of reporting.
The exposed data included names, national ID numbers, and banking details of affected employees. TSMC stated it was notifying impacted staff and coordinating with the cloud provider and investigators.
TSMC's U.S.-listed shares opened 4.53% lower at $394.62 on November 12, later recovering to close at $405.49, down 1.90% for the day. The VanEck Semiconductor ETF (SMH) followed a similar pattern, opening 4.33% lower and closing down 1.03%. Market observers noted that broader volatility in semiconductor stocks made it difficult to isolate the leak's specific impact on TSMC's share price.
Cloud Provider Security Questions
TSMC's annual filing indicates the company sets security and confidentiality requirements for external providers. The company previously cut off data exchange with supplier Kinmax in 2023 following a breach that exposed server setup information.
The incident highlights ongoing debates about vendor responsibility in data protection. Some observers noted that while employers select vendors, employees bear the consequences of breaches, raising questions about liability distribution in supply chain security failures.
The requested ransom of 3 BTC places the incident within a broader market for stolen data. Chainalysis tracked $87.5 million in on-chain volume at fraud shops in 2025, reflecting the scale of data trading in the criminal ecosystem.
