TSMC allegedly hacked by LockBit ransomware? TSMC supplier Kinmax Hacked, TSMC not affected

[hskuo]

Taiwan Semiconductor Manufacturing Company (TSMC), responsible for 65% of the world’s semiconductors and 90% of the high-end chips, appeared on LockBit’s blog late Thursday.

The attackers didn’t specify which type of data they might have stolen, but the cybercriminals are demanding a $70 million ransom to either destroy all the data or make it available for download.

The perpetrators have threatened to publish network entry points as well as login and password details if TSMC refuse to pay. However, the post did not include any data samples or other indications of the type of information the attackers may have got their hands on.

TSMC allegedly hacked by LockBit ransomware | Cybernews

LockBit didn’t specify which type of data they might have stolen, but the cybercriminals are demanding a $70 million ransom.

cybernews.com

 

[freshshine1]

TSMC has released an official statement, long story short they are not affected.
The company that has been hacked is Kinmax, an IT and SI service provider. TSMC is one of the users on their list of cooperating business which is possibly why rumor spread TSMC got hacked as well.

According to TSMC leaked info include the factory hardware settings provided by Kinmax, but since TSMC has adjusted all of them according to their own safety standards before use, there is no concern here nor any leaked data.

https://cybernews.com/news/tsmc-data-breach-lockbit/
https://money.udn.com/money/story/5612/7269764

 

[Fred Chen]

TSMC has released an official statement, long story short they are not affected.
The company that has been hacked is Kinmax, an IT and SI service provider. TSMC is one of the users on their list of cooperating business which is possibly why rumor spread TSMC got hacked as well.

According to TSMC leaked info include the factory hardware settings provided by Kinmax, but since TSMC has adjusted all of them according to their own safety standards before use, there is no concern here nor any leaked data.

https://cybernews.com/news/tsmc-data-breach-lockbit/
https://money.udn.com/money/story/5612/7269764

So TSMC is ok if the example factory settings are on display?

 

[Daniel Nenni]

Taiwan Semiconductor Manufacturing Company (TSMC), responsible for 65% of the world’s semiconductors and 90% of the high-end chips, appeared on LockBit’s blog late Thursday.

The attackers didn’t specify which type of data they might have stolen, but the cybercriminals are demanding a $70 million ransom to either destroy all the data or make it available for download.

The perpetrators have threatened to publish network entry points as well as login and password details if TSMC refuse to pay. However, the post did not include any data samples or other indications of the type of information the attackers may have got their hands on.

TSMC allegedly hacked by LockBit ransomware | Cybernews

LockBit didn’t specify which type of data they might have stolen, but the cybercriminals are demanding a $70 million ransom.

cybernews.com

Title should say: TSMC supplier Kinmax Hacked, TSMC not affected if you want integrity over clicks which clearly is not the case here.

 

[freshshine1]

So TSMC is ok if the example factory settings are on display?

I cannot answer for them, but probably more important to TSMC and cooperating companies is no further customer information and business confidentials were leaked. Example factory settings could only give you so much information when at TSMC, every hardware component undergoes a series of extensive checks and adjustments, including security configurations, before being installed into TSMC's system. You could say further downplays the hacker's claim of leaked internal credentials.

TSMC confirmed that a “cybersecurity incident” at one of the company’s IT hardware suppliers, named as Kinmax Technology, led to the leak of “information pertinent to server initial setup and configuration.” Upon review, this incident has not affected TSMC’s business operations, nor did it compromise any TSMC’s customer information,” the spokesperson added.

Kinmax said in its notice. “The leaked content mainly consisted of system installation preparation that the Company provided to our customers as default configurations.”

https://techcrunch.com/2023/06/30/t...-lockbit-cyberattack-on-third-party-supplier/

 

[Fred Chen]

I cannot answer for them, but probably more important to TSMC and cooperating companies is no further customer information and business confidentials were leaked. Example factory settings could only give you so much information when at TSMC, every hardware component undergoes a series of extensive checks and adjustments, including security configurations, before being installed into TSMC's system. You could say further downplays the hacker's claim of leaked internal credentials.



https://techcrunch.com/2023/06/30/t...-lockbit-cyberattack-on-third-party-supplier/

So, seems safe to call the bluff (?).