---
title: TSMC confirms current and former employees' data was exposed through a cloud service provider; says its own systems show no sign of intrusion | ctxsec
url: https://ctxsec.com/items/tsmc-confirms-employee-records-leaked-via-third-party-cloud-provider-no-internal-breach
description: "TSMC said some current and former employees' information was placed on external websites without authorization, that the data matches records held in a service run by an unnamed cloud service provider, and that it found no evidence its own systems were breached and no production or customer data involved. It is notifying affected staff and working with the provider, investigators and third-party security firms. Media reports say a seller on underground forums offered 46,000 employee records (6.9GB) for 3 BTC and threatened to publish them within a week; Taiwan News cites Business Next saying samples included names, national ID numbers and bank account details."
status: "official (TSMC statement reported by CNA, Nov 12, 2026); the 46,000-record / 6.9GB / 3 BTC figures are the seller's claims as reported by media, not confirmed by TSMC"
published: 2026-11-12
---

> TSMC said some current and former employees' information was placed on external websites without authorization, that the data matches records held in a service run by an unnamed cloud service provider, and that it found no evidence its own systems were breached and no production or customer data involved. It is notifying affected staff and working with the provider, investigators and third-party security firms. Media reports say a seller on underground forums offered 46,000 employee records (6.9GB) for 3 BTC and threatened to publish them within a week; Taiwan News cites Business Next saying samples included names, national ID numbers and bank account details.

[← Cybersecurity News](/news) · [markdown](/items/tsmc-confirms-employee-records-leaked-via-third-party-cloud-provider-no-internal-breach.md)

official (TSMC statement reported by CNA, Nov 12, 2026); the 46,000-record / 6.9GB / 3 BTC figures are the seller's claims as reported by media, not confirmed by TSMC

2026-11-12 7:40 AM ET

### TSMC confirms current and former employees' data was exposed through a cloud service provider; says its own systems show no sign of intrusion

- **Confirmed by TSMC:** employee data exposure via a third-party cloud provider, notification under way, no evidence of TSMC system compromise.
- **Not confirmed by TSMC:** record count, data types, price and the seller's deadline.
- **Lesson:** HR, payroll and benefits SaaS hold the most sensitive employee data; know which providers hold it and what breach notice terms you have.
- Taiwan News notes other recent Taiwanese incidents: EzTravel (690,000+ customers) and Bank SinoPac (NT$41.76M in unauthorized transfers).

Sources: [CNA (Central News Agency, Taiwan): TSMC statement on employee information placed on external websites (Nov 12, 2026)](https://www.cna.com.tw/news/afe/202611120132.aspx) · [Taiwan News: TSMC reports leak of employee information (Nov 12, 2026)](https://www.taiwannews.com.tw/news/6475582)