TSMC Says Current and Former Employee Data Was Posted Online Without Authorization
TSMC has been hacked.
Context
TSMC makes the chips behind nearly every frontier AI model, so any breach touching it draws close attention even when production systems are not hit.
TSMC is the world's largest contract chipmaker and produces the advanced chips used by Nvidia, AMD and other AI hardware companies. Andrew Curran posted an image of a TSMC filing dated November 12 that contains a statement on unauthorized access to employee personal data.
Deep dive
Andrew Curran posted "TSMC has been hacked" on the evening of November 12, attaching an image of a TSMC filing dated November 12, 2026 and signed by Wendell Huang, senior vice president and chief financial officer.
The statement in the image, titled "Statement Regarding the Unauthorized Access of Employee Personal Data," says TSMC found that some current and former employee data was made available on an external website without authorization. TSMC says it has found no evidence that its own systems were compromised. It says the information matched data stored in the system services of a cloud service provider and is unrelated to the company's operations or to customer data.
According to the statement, TSMC is informing affected personnel and providing support, and has engaged the cloud service vendor, the relevant investigating authorities and a third party cybersecurity agency to establish the facts. The company says it remains committed to protecting employee privacy.
The filing does not name the cloud provider, the website where the data appeared, or how many people are affected. Curran's post drew more than 500,000 views, and other accounts noted that the leak covered employee information only.
What to expect next
Watch for TSMC to identify the cloud vendor and the number of employees affected, and for findings from the investigating authorities. Customers will want confirmation that no design or manufacturing data was involved. Any sign that the leak reaches beyond personal data would matter for the whole AI chip supply chain, since TSMC builds the most advanced accelerators. Regulators in Taiwan may also ask whether the cloud vendor met its data protection duties.
