Former digital minister warns of growing cyber threats to TSMC

Former Taiwanese digital minister Huang Yen-nun has warned that TSMC faces increasing cybersecurity threats, especially from state-backed hackers and ransomware groups.

Speaking at an Academia Sinica conference, Huang said hostile cyberattacks could be the most effective way to harm Taiwan’s semiconductor sector, emphasizing the need for stronger industry precautions.

Huang, who now leads Academia Sinica’s Taiwan Information Security Center, noted TSMC’s growing global influence in AI and the national security risk of production disruption.

He pointed to risks from outdated systems, supply chain weaknesses, and human error, noting that TSMC’s large workforce and reliance on external equipment add management challenges.

Former vice premier Shih Jun-ji highlighted TSMC’s market value, now exceeding Taiwan’s annual GDP, and noted its importance to both Taiwan and the US.

Shih also referenced US defense concerns over TSMC’s security, as well as recent tensions between Taiwan and South Africa over chip export controls.

🔗 Source: Focus Taiwan

🧠 Food for thought

Implications, context, and why it matters.

TSMC (Taiwan Semiconductor Manufacturing Company) lost about $84 million in the 2018 WannaCry event, with roughly 80% of equipment restored in three days 1

Malware arrived on a supplier tool, then spread at several Taiwan sites, forcing shutdowns across multiple fabs (fabrication plants) 1.
A 12-inch wafer for high-end uses costs over $20,000, so stoppages may ruin thousands at once 1.
Internal process lapses, not a sophisticated breach, caused the outage 1. The episode exposed how OT (operational technology, the hardware plus software that directly monitor and control factory equipment) flaws can ripple through lines built without strong cybersecurity 1.
SEMI (Semiconductor Equipment and Materials International) created E187 for fab equipment cybersecurity. Fabs now require OEMs (original equipment manufacturers) to meet it when buying tools 1.

Security vendors plus industrial control system specialists can pursue $39 billion in CHIPS and Science Act (Creating Helpful Incentives to Produce Semiconductors) subsidies 2

The CHIPS Act allocates $39 billion for U.S. fabs and imposes geographical manufacturing limits on recipients 2.
Companies receiving CHIPS funding face complex compliance and reporting duties, including procurement rules plus project accounting 2.
These restrictions apply for 10 years from the date of funding 2.
Providers offering NIST (National Institute of Standards and Technology) Cybersecurity Framework 2.0 Semiconductor Profile assessments plus SEMI E187 certification services have a clear pitch 1. These standards were built for semiconductor manufacturing environments, so buyers now expect them 1.