TSMC supplier addresses LockBit ransomware claims
Amidst LockBit ransomware claims, a TSMC supplier responds to clarify the cyberattack incident.
In a recent cybersecurity incident, the notorious LockBit ransomware gang made bold claims of hacking Taiwan Semiconductor Manufacturing Company (TSMC) and threatened to publish sensitive data stolen from the attack unless a hefty $70 million ransom was paid. However, in a swift response, TSMC issued a statement clarifying that the hackers had, in fact, targeted one of their IT hardware suppliers rather than the semiconductor giant itself.
TSMC supplier addresses LockBit ransomware claims
On Friday, Kinmax, an IT hardware supplier responsible for providing services to TSMC, released a press statement disclosing the discovery of the cyberattack that occurred on Thursday morning. The attack specifically targeted an internal engineering testing environment, which has since been taken offline by Kinmax. According to the statement, the attackers managed to steal information related to the configuration and installation procedures of Kinmax's systems.
However, the company assured that "no damage has been caused to the customer" at the time of the press release. TSMC, in response to the incident, swiftly terminated all data exchange activities with Kinmax.
The extent of the supply chain attack's impact remains uncertain, as the hackers only gained insights into some of Kinmax's customers and information about default network configurations, which are usually modified after installation.
It may take some time to fully assess the implications of the attack on other Kinmax customers, as such evaluations typically require at least a couple of days to be completed.