LockBit Claims TSMC Hack, Demands $70m Ransom

The National Disaster Agency, a subsidiary of the LockBit ransomware group, posted the name of the world’s largest chip manufacturer, Taiwan Semiconductor Manufacturing Company (TSMC), on LockBit’s dark web leak site on June 29, 2023. Did.

The attacker demanded a $70 million ransom payment from TSCM to prevent data leaks allegedly in TSCM’s possession. Victims were initially given seven days to respond, but the deadline was later extended to August 6.

“If payment is declined, the company’s entrance, password and login information will also be disclosed. All available data will be disclosed [sic]’” Rockbit wrote.

At this stage, we have no information on what kind of data LockBit may have stolen or whether any TSMC data exists.

At the same time, one of TSMC’s suppliers, Kinmax Technologies (which also partners with Cisco, HPE, Microsoft, Citrix, VMware, and Nvidia), was reportedly subjected to a cyberattack that leaked information related to initial server information. Setup and configuration.

Kinmax has not mentioned TSMC directly and as of this writing there has been no official communication from the chip maker.

If confirmed, it would be the fourth largest ransom demand in the history of ransomware, according to William Thomas, a cyberthreat intelligence researcher at Equinix.

JD Work, senior adviser to the US Cyberspace Solarium Commission, said: on Twitter“The claim that Rockbit hit TSMC certainly requires skepticism until we know the extent, if any, of the impact. It’s a good time for us to assess the wartime first day scenario.”

LockBit was recently found to be the most active ransomware group in the first quarter of 2023, according to Acronis.

TSMC produces 65% of the world’s semiconductors and 90% of cutting-edge nodes. Estimated annual revenue for 2023 is expected to exceed $74 billion.