Chipmaker giant TSMC confirmed a data leak affecting 46,000 employee records today. A seller demanded three Bitcoin for the alleged data. TSMC said the breach originated from a third-party cloud provider, not its internal systems.
The compromised data did not involve information related to TSMC's core production operations or customer intellectual property. TSMC found no evidence of an internal network intrusion after a thorough review. The company has terminated its contract with the cloud provider identified as the breach source.
The three Bitcoin ransom demand—currently valued around $190,000—underscores Bitcoin's entrenched role in cyber extortion. While substantial, this amount represents a negligible fraction of Bitcoin's daily global trading volume, which often exceeds $20 billion. On-chain analysis shows transactions of this size can be difficult to trace once they enter mixing services or pass through multiple intermediary wallets. This perceived fungibility and pseudonymous nature makes Bitcoin a preferred payment method for threat actors despite the transparency of its public ledger. The finality of Bitcoin transactions also appeals to those seeking irreversible payments.
TSMC is cooperating with law enforcement agencies to track the perpetrators and recover the stolen data. The company has launched an internal review of its cloud security protocols expected to conclude next quarter.
