TSMC employee data exposed on external website

Available on EDGAR 11/12/2026 - 08:03 AM EST Accepted by SEC EDGAR 11/12/2026 - 08:03 AM EST Learn about SEC filing dates

Rhea-AI Filing Summary

Taiwan Semiconductor Manufacturing Company Limited (TSMC) said some current and former employee data had been made available on an external website without authorization. TSMC said it had found no evidence that its systems were compromised, and that the information matched data stored in a cloud service provider’s system services but was unrelated to company operations and customer-related data. TSMC is informing affected personnel and providing support, while working with the cloud service vendor, investigating authorities and a third-party cybersecurity agency to ascertain the facts and take necessary actions.

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

Was TSMC customer data involved in the employee-data exposure?

TSMC said the information was unrelated to company operations and customer-related data. It also said it had found no evidence that its systems were compromised.

AI-generated analysis. How Rhea-AI works. Not financial advice.

Form 6-K: How Foreign Companies Report to the SEC →

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

1934 Act Registration No. 1-14700

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

_____________________________

FORM 6-K

_____________________________

REPORT OF FOREIGN PRIVATE ISSUER

PURSUANT TO RULE 13a-16 OR 15d-16 UNDER

THE SECURITIES EXCHANGE ACT OF 1934

For the month of November 2026

(Commission File Number: 001-14700)

_____________________________

Taiwan Semiconductor Manufacturing Company Limited

(Translation of Registrant’s Name Into English)

_____________________________

No. 8, Li-Hsin Road 6

Hsinchu Science Park

Hsinchu 300-096, Taiwan

Republic of China

(Address of Principal Executive Offices)

_____________________________

Indicate by check mark whether the registrant files or will file annual reports under cover of Form 20-F or Form 40-F.

Form 20-F  x            Form 40-F  o

Indicate by check mark if the registrant is submitting the Form 6-K in papers as permitted by Regulation S-T Rule 101(b)(1): o

Indicate by check mark if the registrant is submitting the Form 6-K in papers as permitted by Regulation S-T Rule 101(b)(7): o

SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized.

Taiwan Semiconductor Manufacturing Company Limited

Date:   November 12, 2026

By

/s/ Wendell Huang

Wendell Huang

Senior Vice President and Chief Financial Officer

Statement Regarding the Unauthorized Access of Employee Personal Data

TSMC has found that some of our current and former employee data was made available on an external website without authorization. Currently, we have found no evidence that TSMC’s systems have been compromised. This information has been verified to match data stored in the system services of a cloud service provider, but is unrelated to the company’s operations or customer-related data. We have been informing impacted personnel and are providing them with necessary support. TSMC has engaged with both the cloud service vendor, the relevant investigating authorities, and a third-party cybersecurity agency to jointly ascertain the facts and take necessary actions. We remain firmly committed to protecting employee privacy and safeguarding data security.