According to FinanceFeeds, TSMC confirmed on Thursday that data belonging to current and former employees was posted on external websites without authorization. In an SEC filing signed by CFO Wendell Huang, the company stated it found no evidence that its own systems were compromised; the exposed information matched data stored in a cloud service provider's systems instead.
Sellers on underground forums DarkForums and BreachForums are asking 3 Bitcoin (approximately $220,000 at Thursday's price of $73,344) for roughly 46,000 employee records totaling 6.9GB. The sample file contains 499 entries with 19 fields each, including names, dates of birth, addresses, bank information and emergency contact details. Sellers have threatened to publish the full dataset if no buyer emerges within a week.