TSMC confirms employee data leak linked to cloud provider

TSMC confirmed that personal information belonging to current and former employees was published online without authorization. The chipmaker said the leaked information matched data held in a cloud provider's services and that it found no evidence its own systems had been compromised. A threat actor posted a 499-row sample on November 8, claiming to hold 6.9GB containing 46,000 employee records. The actor said the information included national ID numbers, addresses, contact details and banking information, and offered it for auction. TSMC is notifying affected staff and has engaged a third-party cybersecurity firm. The company said the incident does not affect operations or customers.