TSMC confirms employee data leak as hackers seek 3 BTC for the records

Taiwan Semiconductor Manufacturing Company, the world's most important chipmaker, has confirmed that personal data belonging to some of its employees was exposed through a third-party cloud system.The hackers behind the leak have put a price on it: 3 BTC, or around $220,000.TSMC announced the incident on November 12, 2026. The company stressed that its own internal systems were not breached, and that production operations and customer data were unaffected.The breach came to light after the hackers claimed to have obtained approximately 46,000 employee records. That haul reportedly totals 6.9 GB of data, covering both current and former staff.The records were offered for sale on online forums, including DarkForums and BreachForums. The asking price was set at a starting point of 3 BTC, roughly $220,000 at the time of the listing.The sellers also attached a deadline. If no buyer stepped forward within a week, they threatened to release the full dataset publicly.To prove they weren't bluffing, the hackers released a sample file named "tsmc.txt." It contained 499 records, each with 19 fields of information.The fields shown in that sample include names, national IDs, home addresses, phone numbers, email addresses, bank information, job titles and emergency contacts.TSMC's position is that the leak originated with an outside cloud service provider, not its own infrastructure. The company says no internal system was compromised.It is now notifying the individuals whose information was exposed. TSMC is also working with the cloud vendor, law enforcement and external cybersecurity firms to limit potential fallout.This isn't the first time TSMC has found itself on the receiving end of a ransom demand. In mid-2023, the LockBit ransomware group targeted the company, with the extortion attempt centered on a hardware supplier rather than TSMC's own operations.That episode did not cause significant operational damage. But the pattern rhymes: in both cases, the attackers came in through a partner rather than the front door.Large companies have spent years hardening their own networks. The result is that attackers increasingly go after the smaller businesses that hold the big company's data on its behalf.The TSMC case fits that template. The company's crown jewels appear intact, yet the personal information of its workforce traveled through an external system and ended up for sale.For investors, the headline facts are reassuring on the operational side. TSMC says production and customer data were not touched, which is the part of the business that drives revenue and client trust.Worth noting: Bitcoin transactions are recorded on a public ledger. Any payment to the sellers would leave a visible trail, which is one reason law enforcement involvement in cases like this matters.There are a few things to watch from here. The first is whether the hackers follow through on their threat to publish the full dataset once their one-week window closes. The second is whether TSMC or its cloud vendor discloses more about how the data was accessed. The third is whether regulators in Taiwan or elsewhere take an interest in the vendor's security controls.