Key Takeaways

  • Hackers stole 6.9 gigabytes of data containing 46,000 TSMC employee records from an external cloud vendor, demanding three Bitcoin in ransom.
  • The stolen TSMC data contained 19 personal fields per worker, including national ID numbers, banking details, home addresses, and emergency contacts.
  • Technical audits by Will Depue and Dylan Patel revealed that DeepSeek, Moonshot, MiniMax, and Ant Group trained models on barred Nvidia Blackwell hardware.
  • DeepSeek left clear architectural proof of Blackwell training directly inside its public open-source code repositories.
  • Chinese labs stay close to the frontier with small chip volumes because architectural distillation requires far less compute than raw pre-training.

Third Parties Are Your True Security Perimeter

John Coogan pointed out that TSMC did not suffer an intrusion on its own internal manufacturing systems. Instead, attackers compromised an external cloud provider that handled human resources data for both current and former staff. “TSMC was hacked through an outside cloud provider that stored records on its current and former employees,” (play from 22:53) Coogan said. “The company confirmed the leak after dark forms and breach forms listings offered 6.9 gigs.” (play from 22:58)

The hackers demanded three Bitcoin for the 6.9-gigabyte dump. While three Bitcoin is modest for an enterprise ransom, the information itself cuts straight into operational security. Coogan noted that the records included “19 fields per person including national ID numbers. So basically social security numbers, addresses, bank details, and emergency contacts.” (play from 23:38)

When an adversary targets a semiconductor giant, they rarely need to crack hardened foundry networks on day one. They target the third-party software vendors that manage payroll, travel, benefits, or background checks. Compromising 46,000 employee identities hands hostile actors the exact personal details required to run spear-phishing campaigns against cleanroom engineers, plant managers, and supply chain executives.

Distillation Lets Chinese Labs Bypass Export Limits

While TSMC dealt with the perimeter leak, technical researchers documented how American export restrictions fail in practice. Nvidia Blackwell chips are barred from export to China under strict trade controls. Yet independent technical analysts discovered that top Chinese labs are already running them in production clusters.

“Will Depue has been digging into the top four Chinese AI labs, DeepSeek, Moonshot, MiniMax, Ant Group,” (play from 27:46) Coogan explained. “He claims that they built their newest models on Nvidia's most advanced Blackwell chips, which are barred from import.” (play from 27:53) SemiAnalysis founder Dylan Patel corroborated the findings almost immediately. “Dylan Patel chimed in and said this is widely known because you can just look at the code and see that DeepSeek open sources it and if you just look at it for 10 seconds you can figure out that it's trained on Blackwell.” (play from 28:11)

Washington policy assumes that training frontier models requires tens of thousands of synchronized GPUs, which are difficult to smuggle across borders undetected. That math works for raw pre-training, but it fails against algorithmic distillation. As Coogan noted, “If you're doing a distillation model, something where you're a little bit more sure that it's going to work, you actually wind up needing less compute to basically catch up or stay near Frontier.” (play from 29:26)

When an engineering team uses larger foreign models as teachers to train efficient student architectures, they eliminate the expensive exploratory failures of initial training runs. Smuggling a few hundred Blackwell cards through intermediary countries gives a team like DeepSeek or Moonshot enough throughput to match American performance targets. Export controls slow down brute-force scaling, but they do not stop teams that know how to distill intelligence into lighter architectures.

What to Do With This

Audit your SaaS vendors this week by pulling your company's vendor directory and identifying every cloud tool with access to employee personal data or API keys. Remove any external provider that lacks SOC 2 compliance and enforce hardware key two-factor authentication on every linked administrative account by Friday.