Company Details
tsmc
23,998
770,613
3344
tsmc.com
0
TSM_2921566
In-progress

TSMC Company CyberSecurity Posture
tsmc.comEstablished in 1987, TSMC is the world's first dedicated semiconductor foundry. As the founder and a leader of the Dedicated IC Foundry segment, TSMC has built its reputation by offering advanced and "More-than-Moore" wafer production processes and unparalleled manufacturing efficiency. From its inception, TSMC has consistently offered the foundry segment's leading technologies and TSMC COMPATIBLE® design services. TSMC has consistently experienced strong growth by building solid partnerships with its customers, large and small. IC suppliers from around the world trust TSMC with their manufacturing needs, thanks to its unique integration of cutting-edge process technologies, pioneering design services, manufacturing productivity and product quality. The company's total managed capacity reached above 9 million 12-inch equivalent wafers in 2015. TSMC operates three advanced 12-inch wafer fabs, four eight-inch wafer fabs, one six-inch wafer fab (fab 2) and two backend fabs (advanced backend fab 1 and 2). TSMC also manages two eight-inch fabs at wholly owned subsidiaries: WaferTech in the United States and TSMC China Company Limited. TSMC also obtains eight-inch wafer capacity from other companies in which the Company has an equity interest. TSMC is listed on the Taiwan Stock Exchange (TWSE) under ticker number 2330, and its American Depositary Shares trade on the New York Stock Exchange (NYSE) under the symbol "TSM".
Company Details
tsmc
23,998
770,613
3344
tsmc.com
0
TSM_2921566
In-progress
Between 800 and 849

TSMC Global Score (TPRM)XXXX

Description: The largest contract chip manufacturer in the world, Taiwan Semiconductor Manufacturing Company (TSMC), has acknowledged that a data breach occurred after being identified as a victim by the LockBit ransomware group. If the business does not comply with the gang's $70 million ransom demand, the corporation risks having data seized from it published. This company controls 60% of the global foundry market. In accordance with the Company's security rules and SOPs, TSMC promptly stopped exchanging data with the relevant supplier.
Description: Taiwan prosecutors arrested six individuals suspected of stealing trade secrets from TSMC, a critical global semiconductor manufacturer. The breach involved former and current employees allegedly obtaining core technology, with investigations ongoing to determine if data was leaked to external parties. TSMC, a key supplier for companies like Nvidia and Apple, has taken disciplinary and legal actions. The incident highlights risks to national security and the competitive edge in advanced chipmaking, particularly as TSMC prepares for mass production of 2-nanometer chips. The case underscores the high stakes in semiconductor technology amid global competition.
Description: The confidential code signing keys for Taiwanese PC manufacturer MSI were exposed on a darkweb leak site used by the ransomware group that attacked the firm. It claimed to have taken private keys and a framework for creating bios from the company along with the source code. The expert cautions about the potential effects of such a leak and suggests carrying out a careful examination to ascertain the extent of the leak.


TSMC has 12.36% more incidents than the average of same-industry companies with at least one recorded incident.
TSMC has 29.87% more incidents than the average of all companies with at least one recorded incident.
TSMC reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.
TSMC cyber incidents detection timeline including parent company and subsidiaries

Established in 1987, TSMC is the world's first dedicated semiconductor foundry. As the founder and a leader of the Dedicated IC Foundry segment, TSMC has built its reputation by offering advanced and "More-than-Moore" wafer production processes and unparalleled manufacturing efficiency. From its inception, TSMC has consistently offered the foundry segment's leading technologies and TSMC COMPATIBLE® design services. TSMC has consistently experienced strong growth by building solid partnerships with its customers, large and small. IC suppliers from around the world trust TSMC with their manufacturing needs, thanks to its unique integration of cutting-edge process technologies, pioneering design services, manufacturing productivity and product quality. The company's total managed capacity reached above 9 million 12-inch equivalent wafers in 2015. TSMC operates three advanced 12-inch wafer fabs, four eight-inch wafer fabs, one six-inch wafer fab (fab 2) and two backend fabs (advanced backend fab 1 and 2). TSMC also manages two eight-inch fabs at wholly owned subsidiaries: WaferTech in the United States and TSMC China Company Limited. TSMC also obtains eight-inch wafer capacity from other companies in which the Company has an equity interest. TSMC is listed on the Taiwan Stock Exchange (TWSE) under ticker number 2330, and its American Depositary Shares trade on the New York Stock Exchange (NYSE) under the symbol "TSM".

onsemi (Nasdaq: ON) is driving disruptive innovations to help build a better future. With a focus on automotive and industrial end-markets, the company is accelerating change in megatrends such as vehicle electrification and safety, sustainable energy grids, industrial automation, and 5G and cloud i
Micron is an industry leader in innovative memory and storage solutions transforming how the world uses information to enrich life for all. With a relentless focus on our customers, technology leadership, and manufacturing and operational excellence, Micron delivers a rich portfolio of high-performa
Applied Materials is the leader in materials engineering solutions that are at the foundation of virtually every new semiconductor and advanced display in the world. The technology we create is essential to advancing AI and accelerating the commercialization of next-generation chips. At Applied, we
We believe that infrastructure powers progress. That execution is as essential as innovation. That better collaboration builds better technology. At Marvell, We go all in with you. Focused and determined, we unite behind your goals as our own. We leverage our unrivaled portfolio of infrastructure t

MediaTek Incorporated (TWSE: 2454) is a global fabless semiconductor company that enables nearly 2 billion connected devices a year. We are a market leader in developing innovative systems-on-chip (SoC) for mobile, home entertainment, connectivity and IoT products. Our dedication to innovation has p
GlobalFoundries (GF) is one of the world’s leading semiconductor manufacturers. GF is redefining innovation and semiconductor manufacturing by developing and delivering feature-rich process technology solutions that provide leadership performance in pervasive high growth markets. GF offers a unique
KLA develops industry-leading equipment and services that enable innovation throughout the electronics industry. We provide advanced process control and process-enabling solutions for manufacturing wafers and reticles, integrated circuits, packaging and printed circuit boards. In close collaboration

ST is a global semiconductor leader delivering intelligent and energy-efficient products and solutions that power the electronics at the heart of everyday life. ST’s products are found everywhere today, and together with our customers, we are enabling smarter driving and smarter factories, cities an
Microchip Technology Inc. is a leading semiconductor supplier of smart, connected and secure embedded control solutions. Its easy-to-use development tools and comprehensive product portfolio enable customers to create optimal designs which reduce risk while lowering total system cost and time to mar
.png)
Apple is preparing to shift part of its chip production back to Intel, marking a significant pivot in its supply chain strategy.
TOKYO -- Rapidus, which aims to bring production of leading-edge semiconductors back to Japan, is set to start construction on a second...
Doppel, a cybersecurity company focused on AI-powered threat detection, has raised $70 million in Series C funding, pushing its valuation...
Taiwan-Israel: behind the scenes of a discreet partnership (2/2) – Behind apparent standard technological agreements, Israeli and Taiwanese...
Synopsys TSMC collaboration expands certified flows, IP, and 3DIC enablement to accelerate AI and multi-die chip design on advanced nodes.
The U.S. government reportedly revoked authorisation for Taiwan Semiconductor Manufacturing Company (TSMC) to ship chip supplies to China.
TAIPEI (Taiwan News) — TSMC plans to offer its in-house trade secret registry to suppliers and partners in Europe and the US,...
TSMC is extending its influence beyond chipmaking by offering a trade secrets management system to suppliers, aiming to strengthen...
TSMC, Samsung, SK Hynix and others that have invested in or plan to invest will pay no tariff, according to the president's comments.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of TSMC is http://www.tsmc.com.
According to Rankiteo, TSMC’s AI-generated cybersecurity score is 813, reflecting their Good security posture.
According to Rankiteo, TSMC currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, TSMC is not certified under SOC 2 Type 1.
According to Rankiteo, TSMC does not hold a SOC 2 Type 2 certification.
According to Rankiteo, TSMC is not listed as GDPR compliant.
According to Rankiteo, TSMC does not currently maintain PCI DSS compliance.
According to Rankiteo, TSMC is not compliant with HIPAA regulations.
According to Rankiteo,TSMC is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
TSMC operates primarily in the Semiconductor Manufacturing industry.
TSMC employs approximately 23,998 people worldwide.
TSMC presently has no subsidiaries across any sectors.
TSMC’s official LinkedIn profile has approximately 770,613 followers.
TSMC is classified under the NAICS code 3344, which corresponds to Semiconductor and Other Electronic Component Manufacturing.
No, TSMC does not have a profile on Crunchbase.
Yes, TSMC maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/tsmc.
As of December 11, 2025, Rankiteo reports that TSMC has experienced 3 cybersecurity incidents.
TSMC has an estimated 1,267 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach and Data Leak.
Detection and Response: The company detects and responds to cybersecurity incidents through an containment measures with stopped exchanging data with the relevant supplier, and incident response plan activated with internal investigation, and law enforcement notified with yes, and containment measures with disciplinary action, legal proceedings..
Title: MSI Code Signing Keys Exposed on Darkweb
Description: The confidential code signing keys for Taiwanese PC manufacturer MSI were exposed on a darkweb leak site used by the ransomware group that attacked the firm. It claimed to have taken private keys and a framework for creating bios from the company along with the source code. The expert cautions about the potential effects of such a leak and suggests carrying out a careful examination to ascertain the extent of the leak.
Type: Data Breach
Attack Vector: Darkweb Leak
Threat Actor: Ransomware Group
Title: TSMC Data Breach by LockBit Ransomware Group
Description: Taiwan Semiconductor Manufacturing Company (TSMC), the largest contract chip manufacturer in the world, has acknowledged that a data breach occurred after being identified as a victim by the LockBit ransomware group.
Type: Ransomware
Threat Actor: LockBit ransomware group
Motivation: Financial gain
Title: Trade Secrets Theft at Taiwan Semiconductor Manufacturing Co. (TSMC)
Description: Taiwan prosecutors arrested six people suspected of stealing trade secrets from Taiwan Semiconductor Manufacturing Co. (TSMC), involving potential national security breaches. The incident includes allegations of illegal obtaining of core technology by former and current staff.
Type: Insider Threat, Trade Secret Theft
Attack Vector: Insider Access
Threat Actor: Former and Current Employees
Motivation: Financial Gain, Corporate Espionage
Common Attack Types: The most common types of attacks the company has faced is Breach.
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Insider Access.

Data Compromised: Code signing keys, Bios framework, Source code

Data Compromised: Core Technology, 2-nanometer Chip Development Information
Brand Reputation Impact: Potential Damage
Legal Liabilities: Legal Proceedings Initiated
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Code Signing Keys, Bios Framework, Source Code, , Trade Secrets and Core Technology.

Entity Name: MSI
Entity Type: PC Manufacturer
Industry: Technology
Location: Taiwan

Entity Name: Taiwan Semiconductor Manufacturing Company (TSMC)
Entity Type: Corporation
Industry: Semiconductor Manufacturing
Location: Taiwan

Entity Name: Taiwan Semiconductor Manufacturing Co. (TSMC)
Entity Type: Corporation
Industry: Semiconductor Manufacturing
Location: Taiwan
Size: Large

Entity Name: Tokyo Electron Ltd.
Entity Type: Supplier
Industry: Semiconductor Equipment
Location: Taiwan (Premises)

Containment Measures: Stopped exchanging data with the relevant supplier

Incident Response Plan Activated: Internal Investigation
Law Enforcement Notified: Yes
Containment Measures: Disciplinary Action, Legal Proceedings
Incident Response Plan: The company's incident response plan is described as Internal Investigation.

Type of Data Compromised: Code signing keys, Bios framework, Source code

Type of Data Compromised: Trade Secrets, Core Technology
Sensitivity of Data: High
Data Exfiltration: Suspected
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by stopped exchanging data with the relevant supplier, , disciplinary action and legal proceedings.

Legal Actions: Legal Proceedings Initiated
Ensuring Regulatory Compliance: The company ensures compliance with regulatory requirements through Legal Proceedings Initiated.

Recommendations: Carry out a careful examination to ascertain the extent of the leak.

Source: Bloomberg
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: BloombergUrl: https://www.bloomberg.com.

Investigation Status: Ongoing

Entry Point: Insider Access
High Value Targets: 2-nanometer Chip Development Information
Data Sold on Dark Web: 2-nanometer Chip Development Information

Root Causes: Insider Threat
Corrective Actions: Disciplinary Action, Legal Proceedings
Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Disciplinary Action, Legal Proceedings.
Last Ransom Demanded: The amount of the last ransom demanded was $70 million.
Last Attacking Group: The attacking group in the last incident were an Ransomware Group, LockBit ransomware group and Former and Current Employees.
Most Significant Data Compromised: The most significant data compromised in an incident were Code Signing Keys, BIOS Framework, Source Code, , Core Technology and 2-nanometer Chip Development Information.
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident were Stopped exchanging data with the relevant supplier, Disciplinary Action and Legal Proceedings.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Core Technology, 2-nanometer Chip Development Information, Source Code, Code Signing Keys and BIOS Framework.
Highest Ransom Demanded: The highest ransom demanded in a ransomware incident was $70 million.
Most Significant Legal Action: The most significant legal action taken for a regulatory violation was Legal Proceedings Initiated.
Most Significant Recommendation Implemented: The most significant recommendation implemented to improve cybersecurity was Carry out a careful examination to ascertain the extent of the leak..
Most Recent Source: The most recent source of information about an incident is Bloomberg.
Most Recent URL for Additional Resources: The most recent URL for additional resources on cybersecurity best practices is https://www.bloomberg.com .
Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing.
Most Recent Entry Point: The most recent entry point used by an initial access broker was an Insider Access.
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
