Taiwan Proposes National Security Law Reforms After TSMC Data Breach
Taiwan’s Ministry of Justice has proposed amendments to the National Security Act following a high-profile data breach involving Taiwan Semiconductor Manufacturing Company (TSMC). The incident centers on Wei-Jen Lo, a former TSMC senior vice president, who allegedly took sensitive company data reportedly related to sub-2nm chip technology before joining Intel.
The breach has prompted concerns over industrial espionage and technology theft, particularly in Taiwan’s critical semiconductor sector. Authorities are seeking to close legal loopholes to strengthen protections for trade secrets and national security. TSMC has since filed a lawsuit against Lo, underscoring the severity of the alleged leak.
The proposed revisions aim to enhance penalties and enforcement mechanisms for unauthorized data transfers, reflecting growing tensions in global tech competition. The case highlights the risks of insider threats in advanced manufacturing, where proprietary innovations are prime targets for rival firms.
The amendments, if passed, would mark a significant shift in Taiwan’s legal framework for technology protection, with potential implications for foreign collaborations and supply chain security. The incident also coincides with broader industry trends, including AI-driven demand for advanced chips and escalating U.S.-China tech rivalry.
Source: https://www.digitimes.com/news/a20260325PD221/tsmc-data-security-legal-taiwan.html
TSMC cybersecurity rating report: https://www.rankiteo.com/company/tsmc
"id": "TSM1774419953",
"linkid": "tsmc",
"type": "Breach",
"date": "1/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Semiconductor Manufacturing',
'location': 'Taiwan',
'name': 'Taiwan Semiconductor Manufacturing Company '
'(TSMC)',
'size': 'Large',
'type': 'Corporation'}],
'attack_vector': 'Insider Threat',
'data_breach': {'data_exfiltration': 'Alleged unauthorized transfer to Intel',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Proprietary chip technology '
'(sub-2nm)'},
'description': 'Taiwan’s Ministry of Justice has proposed amendments to the '
'National Security Act following a high-profile data breach '
'involving Taiwan Semiconductor Manufacturing Company (TSMC). '
'The incident centers on Wei-Jen Lo, a former TSMC senior vice '
'president, who allegedly took sensitive company data '
'reportedly related to sub-2nm chip technology before joining '
'Intel. The breach has prompted concerns over industrial '
'espionage and technology theft, particularly in Taiwan’s '
'critical semiconductor sector.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'industrial espionage concerns',
'data_compromised': 'Sensitive company data related to sub-2nm '
'chip technology',
'legal_liabilities': 'TSMC has filed a lawsuit against Wei-Jen Lo'},
'initial_access_broker': {'high_value_targets': 'Sub-2nm chip technology'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Need for stronger legal protections against industrial '
'espionage and insider threats in critical technology '
'sectors.',
'motivation': 'Technology Theft, Industrial Espionage',
'post_incident_analysis': {'corrective_actions': 'Proposed amendments to '
'Taiwan’s National Security '
'Act to enhance penalties '
'and enforcement mechanisms.',
'root_causes': 'Alleged insider threat and '
'unauthorized data transfer by a '
'high-level executive.'},
'recommendations': 'Enhance penalties and enforcement mechanisms for '
'unauthorized data transfers; improve insider threat '
'detection and prevention.',
'references': [{'source': 'Taiwan Ministry of Justice'}],
'regulatory_compliance': {'legal_actions': 'TSMC lawsuit against Wei-Jen Lo',
'regulatory_notifications': 'Proposed amendments to '
'Taiwan’s National '
'Security Act'},
'stakeholder_advisories': 'Proposed legal reforms to strengthen technology '
'protection and national security.',
'threat_actor': 'Wei-Jen Lo (Former TSMC Senior Vice President)',
'title': 'TSMC Data Breach and Alleged Industrial Espionage',
'type': 'Data Breach, Industrial Espionage, Insider Threat'}