TSMC: 46,000 employee records (6.9GB) offered for sale on underground forum; no intrusion evidence found
Severity: medium · Patch status: no-fix-needed · Since 2026-11-12
TSMC, the world's leading semiconductor foundry, is reportedly affected by a data leak after hackers began openly selling personal data allegedly belonging to 46,000 TSMC employees (6.9GB total) on an underground forum. TSMC emphasized that its investigation found no evidence of intrusion into its systems, suggesting the data may have been obtained via a third party or other means. Affected individuals are TSMC employees whose personal information may be exposed and abused for phishing or identity fraud. No vendor patch applies; the incident is under investigation and the full scope and source of the data remain unconfirmed.
What to do
- Alert HR and IT staff to expect targeted phishing using leaked employee data
- Advise employees to watch for phishing and identity fraud and enable MFA
- Review third-party/vendor access to employee data
- Monitor underground forums for further sales of TSMC data
- Complete forensic review to determine actual data source
Sources
All live incidents on Threat Watch
