TSMC hit with employee data breach — 46,000 records including national IDs and bank details up for sale at 3 BTC

TSMC employee data breach exposes 46,000 records including national IDs and bank details

TSMC confirmed a data breach affecting approximately 46,000 current and former employees through a third-party cloud provider. The stolen records include national ID numbers, addresses, bank details, and emergency contacts—a complete identity theft toolkit for fraudsters or corporate espionage operations.

The attacker listed the data for sale on dark web forums for 3 bitcoin, roughly $220,000, with a one-week deadline before threatening to release everything publicly for free.

The ransom math doesn't add up. The asking price is oddly low relative to TSMC's scale and the severity of what's at stake. For a company of TSMC's size and strategic importance, $220,000 is essentially noise. The real trap lies in the game theory: if TSMC pays, it signals that extortion works, inviting follow-up demands or copycat attacks. If it doesn't pay, the threat to release the data creates downstream safety and security liabilities for thousands of employees. Neither option is clean.

The breach also underscores a broader corporate security shift. Companies are increasingly moving toward anonymizing larger employee datasets to reduce exposure surface—a tacit acknowledgment that third-party data handling carries systemic risk regardless of contractual protections.