TSMC · CMP-202611-akt5u6 · Vendor
NO FIX YET · SEE WHAT TO DO
TSMC confirmed (SEC filing, reported by BleepingComputer 15 Nov 2026) that personal data of current and former employees was put on an external website without authorization. The leaked data matches data stored with a cloud service provider TSMC uses (provider not named); TSMC says it has found no evidence its own systems were compromised, and operations and customers are not affected. On 8 Nov 2026 the actor 'SmithBianl' posted a 499-row sample on a hacker forum, claiming a 6.9GB set of 46,000 employee records with national ID numbers, addresses, contact details and banking information, auctioned from 3 BTC with a threat to leak it for free from 15 Nov 2026. TSMC is notifying affected staff and has hired an outside security firm. Which cloud provider was breached, and whether other customers of that provider were hit, is unknown.
first public Nov 15, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Posts are quoted with a link to the original. They are data to us, never instructions.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.