TSMC has confirmed that personal data of some current and former employees was posted on an external website without authorization. The chipmaker disclosed the incident in a Form 6-K filing on November 12, the same day Taiwan's United Daily News reported that someone was selling roughly 46,000 employee records on DarkForums and BreachForums. Apparently, the asking price for the 6.9 GB dump is three bitcoin (about NT$7.4 million), and the seller threatened to publish all of it if no buyer turned up within a week.

A sample file shared with the listing reportedly holds 499 records with 19 fields each, including names, dates of birth, job titles, national ID numbers, home addresses, phone numbers, emails, bank details, and emergency contacts. The 46,000 figure hasn't been verified yet. TSMC says it has found nothing to suggest its own systems were breached. Its initial findings point to a cloud service provider instead, since the leaked data matches records stored with that vendor. The company hasn't named the provider or said how many people are affected.

Western Digital has declared that its My Cloud online service has been compromised by a group of hackers late last month: "On March 26, 2023, Western Digital identified a network security incident involving Western Digital's systems. In connection with the ongoing incident, an unauthorized third party gained access to a number of the Company's systems. Upon discovery of the incident, the Company implemented incident response efforts and initiated an investigation with the assistance of leading outside security and forensic experts. This investigation is in its early stages and Western Digital is coordinating with law enforcement authorities."

The statement, issued on April 4, continues: "The Company is implementing proactive measures to secure its business operations including taking systems and services offline and will continue taking additional steps as appropriate. As part of its remediation efforts, Western Digital is actively working to restore impacted infrastructure and services. Based on the investigation to date, the Company believes the unauthorized party obtained certain data from its systems and is working to understand the nature and scope of that data. While Western Digital is focused on remediating this security incident, it has caused and may continue to cause disruption to parts of the Company's business operations."