Apple supplier TSMC reports data breach, ransomware gang demand $70m

Apple supplier TSMC, the manufacturer of all of the chips that are used in iPhones, iPads, Macs, and other devices, has confirmed a data breach after an attack on one of its third-party suppliers, with ransomware gang LockBit demanding $70 million to prevent it from publishing the stolen data on the dark web.

The Russia-linked hacking gang LockBit have been responsible for several high-profile ransomware data breaches, including attacks on pharmaceutical companies, the UK’s Royal Mail, U.S. government websites, and more.

In a statement given to TechCrunch, a TSMC spokesperson confirmed that a “cybersecurity incident” at one of the company’s IT hardware suppliers, named as Kinmax Technology, led to the leak of “information pertinent to server initial setup and configuration.”

“Upon review, this incident has not affected TSMC’s business operations, nor did it compromise any TSMC’s customer information,” the spokesperson added. “After the incident, TSMC has immediately terminated its data exchange with this concerned supplier in accordance with the Company’s security protocols and standard operating procedures.”

In a post on the dark web, the hacking group said “In the case of payment refusal, also will be published points of entry into the network and passwords and logins company.”