TSMC Confirms Employee Data Leak of 46,000 Records
In this article
Taiwan Semiconductor Manufacturing Company (TSMC) confirmed on November 12, 2026, that some current and former employees’ personal information had appeared online without authorization, according to Ambcrypto. The company said the leaked records matched data held by a cloud service provider, and that its own review found no evidence of a breach in its systems. The incident comes as hackers try to sell the data for 3 Bitcoin, worth about $220,000 at the time, according to reports.
What happened and how TSMC responded
On November 12, TSMC acknowledged that personal information of some current and former employees had been disclosed without authorization. The company stated that preliminary findings indicate the data matches information in the systems and services of a certain cloud service provider, but there is currently no evidence that TSMC’s own data systems were breached. TSMC stressed that the data is unrelated to the company’s production and customer information.
The hackers, who posted on underground forums including DarkForums and BreachForums, claimed to hold 46,000 employee records totaling 6.9 GB and threatened to publish the full dataset within a week if no buyer came forward, as reported by CryptoPotato. No payment has been publicly verified as of press time.
TSMC has been notifying affected individuals in stages and providing necessary assistance, while working closely with the relevant cloud service provider, investigative authorities, and third-party cybersecurity firms to speed up clarification of the cause of the incident and take necessary measures, according to PANews.
Market reaction and broader security concerns
TSMC’s U.S.-listed shares opened 4.53% lower at $394.62 on November 12, before recovering some ground to close at $405.49, down 1.90% on the day. The VanEck Semiconductor ETF (SMH) followed a similar path, opening 4.33% lower and ending the session down 1.03%. The leak surfaced before a volatile session for chipmakers, making it difficult to isolate the leak’s impact on TSMC’s stock.
The incident adds to a series of data security issues affecting Taiwanese businesses. Travel booking platform EzTravel recently disclosed that data belonging to more than 690,000 customers had been exposed, while Bank SinoPac reported that its online banking transaction system was exploited, resulting in unauthorized transfers totaling NT$41.76 million. In South Korea, Daishin Securities and Mirae Asset Global Investment also reported leaks, prompting the Financial Supervisory Service to investigate.
In the crypto sector, Binance said its October theft followed a campaign that targeted engineers before reaching its wallet signing service. Chainalysis tracked $87.5 million in on-chain volume at fraud shops in 2025, highlighting the trade in stolen data.
Why it matters
The breach raises questions about the liability of third-party cloud providers in protecting sensitive employee data. As one user on X noted, “That vendor connection actually raises liability questions that don’t get enough attention in breach discussions.” Another added, “Your employer picked the vendor. You just get the breach notice.” The incident also underscores the growing use of Bitcoin in ransom demands and the trade of stolen data, as highlighted by the Binance and Chainalysis cases. For readers, it serves as a reminder to monitor personal information and be wary of phishing attempts following data leaks.
What to watch
The hackers’ threat to publish the full dataset within a week if no buyer emerges is the immediate deadline to watch. TSMC’s ongoing investigation with the cloud provider and law enforcement may reveal more about the origin of the leak. Additionally, any further disclosures from affected employees or regulatory responses in Taiwan could escalate the story.
Frequently Asked Questions
What data was exposed in the TSMC leak?
The leaked records reportedly include names, national ID numbers, and banking details of TSMC employees, according to Taiwan News and Business Next.
Did hackers breach TSMC’s own systems?
TSMC’s internal review found no evidence of a breach in its systems. The company says the data matched information held by a cloud service provider.
How much are hackers demanding for the TSMC data?
The hackers are asking for 3 Bitcoin, worth about $220,000 at the time of the reports, for the database of 46,000 employee records.
What has TSMC done in response to the leak?
TSMC is notifying affected employees, working with the cloud provider, law enforcement, and cybersecurity firms to investigate the incident.
Sources: AMBCrypto, CryptoPotato, PANews
