Taiwan Semiconductor Manufacturing Co. (TSMC) says personal data belonging to some current and former employees was posted on an external website without authorization. In a November 12 Form 6-K filing with the U.S. Securities and Exchange Commission, the company said the information matched records held in a cloud service provider’s system services, but did not identify the provider or explain how the data was obtained.
TSMC said it has found no evidence that its own systems were compromised and that the exposed information was unrelated to its operations or customer data. The company is notifying affected personnel and working with the cloud provider, investigating authorities and a third-party cybersecurity agency.
The Record reported the incident on November 13 as a breach involving a cloud service provider, but TSMC’s filing does not say the provider itself was breached or explain how the records reached the external website. The company also did not disclose how many people were affected or which data fields were exposed.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
