TSMC hardware supplier hit by LockBit, group demands US$70m as ransom
source link: https://itwire.com/business-it-news/security/tsmc-hardware-supplier-hit-by-lockbit,-group-demands-us$70m-as-ransom.html
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Saturday, 01 July 2023 06:07
TSMC hardware supplier hit by LockBit, group demands US$70m as ransom Featured
By Sam Varghese
A hardware supplier to Taiwan Semiconductor Manufacturing Corporation, the world's biggest semiconductor manufacturer, has suffered an attack by a ransomware group known as LockBit, and the group has demanded a ransom of US$70 million (A$105 million).
The supplier, Kinmax Technology, said in a note: "In the morning of June 29, 2023, the company discovered that our internal specific testing environment was attacked, and some information was leaked.
"The leaked content mainly consisted of system installation preparation that the company provided to our customers as default configurations.
"We would like to express our sincere apologies to the affected customers, as the leaked information contained their names which may have caused some inconvenience.
iTWire has contacted Kingmax for further details. LockBIt attacks only Microsoft's Windows operating system.
A TSMC spokesperson, when contacted, said: "TSMC has recently been aware that one of our IT hardware suppliers experienced a cyber-security incident which led to the leak of information pertinent to server initial setup and configuration.
"At TSMC, every hardware component undergoes a series of extensive checks and adjustments, including security configurations, before being installed into TSMC’s system.
"Upon review, this incident has not affected TSMC’s business operations, nor did it compromise any of TSMC’s customer information.
"After the incident, TSMC has immediately terminated its data exchange with this concerned supplier in accordance with the Company’s security protocols and standard operating procedures.
"TSMC remains committed to enhancing the security awareness among its suppliers and making sure they comply with security standards. This cybersecurity incident is currently under investigation that involves a law enforcement agency."
On its website, the LockBit group said it had given TSMC a deadline of 6 August to pay up, with US$70 million to be paid for deleting all the data. It also quoted the same price for anyone who wanted to download the data.
Additionally, the ransomware group said it would delay the data leak by 24 hours if it were paid US$5000.
Kinmax is a systems integrator based in Hsinchu. It specialises in networking, host /cloud computing, storage, security and database management.
The Australian Cyber Security Centre has plenty of information about LockBit here.
Read 65 times
Please join our community here and become a VIP.
Subscribe to ITWIRE UPDATE Newsletter here
JOIN our iTWireTV our YouTube Community here
BACK TO LATEST NEWS here
GARTNER MARKET GUIDE FOR NDR 2022
You probably know that we are big believers in Network Detection and Response (NDR).Did you realise that Gartner also recommends that security teams prioritise NDR solutions to enhance their detection and response?
Picking the right NDR for your team and process can sometimes be the biggest challenge.
If you want to try out a Network Detection and Response tool, why not start with the best?
Vectra Network Detection and Response is the industry's most advanced AI-driven attack defence for identifying and stopping malicious tactics in your network without noise or the need for decryption.
Download the 2022 Gartner Market Guide for Network Detection and Response (NDR) for recommendations on how Network Detection and Response solutions can expand deeper into existing on-premises networks, and new cloud environments.
PROMOTE YOUR WEBINAR ON ITWIRE
It's all about Webinars.Marketing budgets are now focused on Webinars combined with Lead Generation.
If you wish to promote a Webinar we recommend at least a 3 to 4 week campaign prior to your event.
The iTWire campaign will include extensive adverts on our News Site itwire.com and prominent Newsletter promotion https://itwire.com/itwire-update.html and Promotional News & Editorial. Plus a video interview of the key speaker on iTWire TV https://www.youtube.com/c/iTWireTV/videos which will be used in Promotional Posts on the iTWire Home Page.
Now we are coming out of Lockdown iTWire will be focussed to assisting with your webinars and campaigns and assistance via part payments and extended terms, a Webinar Business Booster Pack and other supportive programs. We can also create your adverts and written content plus coordinate your video interview.
We look forward to discussing your campaign goals with you. Please click the button below.
</div
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK