WORLDTECHTSMC Says Staff Records Surfaced on External Website via Cloud Vendor
Taiwan Semiconductor Manufacturing Company (TSMC) has disclosed that personal records of current and former employees appeared on an outside website without permission. The company says the exposed material matches data held by a cloud service provider, and it reports no sign that its own systems were breached.
What TSMC has confirmed
In a Form 6-K disclosure dated November 12, 2026, TSMC said it is informing affected staff and providing the support they require. The filing was signed by Senior Vice President and Chief Financial Officer Wendell Huang.
According to the company, the exposed details correspond to records kept with a cloud vendor, and there is no evidence that its internal systems were compromised. TSMC added that the records have no connection to company operations or customer information.
Investigation and unresolved points
TSMC has brought in the cloud vendor, relevant investigating authorities and an independent cybersecurity agency to determine what happened and which measures are needed.
The disclosure leaves significant gaps. It does not name the provider, give a count of affected individuals, list the data fields involved, or say when the access or publication occurred. It also does not explain how the information was obtained or who published it.
GBHackers is the only outlet cited for the report on the incident.
Open questions
- How did the employee information leave the cloud provider's systems?
- How many current and former employees are affected?
- Which cloud service provider holds the records?