William Gallagher
Ransomware gang LockBit claims it has breached Apple chip supplier TSMC — but TSMC says no, the group only got into a minor supplier's systems and nothing of the processor firm's was taken.
LockBit has recently been targeting Apple Silicon in its ransomware attacks. Now it claims to have successfully gone after TSMC, the manufacturer that makes Apple Silicon processors.
According to TechCrunch, TSMC confirmed the data breach after the LockBit group publicized that its hack. The ransom demanded to prevent the stolen data being published is $70 million — but TSMC says the Russian-linked gang did not succeed in getting any of its data.
It's likely that TSMC is correct, rather than just attempting to reassure customers like Apple, because its claim that only one supplier was affected is backed up by that company.
TSMC told TechCrunch that a "cybersecurity incident" at Kinmax Technology did lead to the leaking of "information pertinent to server initial setup and configuration."
"Upon review, this incident has not affected TSMC's business operations, nor did it compromise any TSMC's customer information," continued the spokesperson. "After the incident, TSMC has immediately terminated its data exchange with this concerned supplier in accordance with the Company's security protocols and standard operating procedures."
Kinmax Technology agreed that the leaked data was to do with setup information.
"In the morning of June 29, 2023, the Company discovered that our internal specific testing environment was attacked, and some information was leaked," said a Kinmax spokesperson in a statement "The leaked content mainly consisted of system installation preparation that the Company provided to our customers as default configurations."
Kinmax has also said it would "like to express our sincere apologies to the affected customers," backing up TSMC's claim that it was merely one of the firm's clients, and not itself hacked.
Wesley Hilliard
AppleInsider Staff
Andrew Orr
Amber Neely
1 Comment
70 mil is surprisingly tiny ransom for tsmc data. Either what they took values little,or is just a ‘face mask’ ,to divert the attention .
Either way, if they are connected to the chinese,as I presume,that data is already on chinese computers. Not that I personally care,I am not a mindless racist, after all ,its stealing among cousins,sort of speak .
What I care is my personal data integrity,on mu Apple devices. And that seem strong for now. As safe as a phone can be from govt organised snooping,I guess