1. Three wafer fabs were attacked by viruses! TSMC responded: they will all return to normal within one day;
According to Taiwan media news, yesterday (August 3rd) evening, the foundry company TSMC's computer system was attacked by viruses, resulting in bamboo Fab 12, Zhongke Fab 15, Nanke Fab 14 Wait for the machine of the main fab factory to stop.
TSMC's three-site fabs were attacked by viruses
According to relevant sources, the internal computer system of the TSMC Fab 12 plant was first infected with the virus and spread to other production areas through the intranet. It is reported that the TSMC Fab 12 plant is a 12-inch wafer fab located in Hsinchu headquarters. It is also the research and development headquarters of the enterprise group, mainly producing niche products.
Just after the virus attack on the TSMC Fab 12 plant, the same phenomenon occurred in the Fab 15, the South Branch Fab 14 plant.
It is understood that the TSMC Fab 15 plant is located in the Taichung Science Park (Zhongke) and is currently a 28-nanometer and 7-nanometer process production base. The TSMC Fab 14 plant is located in the Tainan Science Park (Nanke) and is currently the main production base for the 16-nanometer process. , orders and capacity are full.
It is worth noting that the affected part of TSMC is mainly concentrated in the 7-nanometer process, including Zhuke, Zhongke and Nanke, and the affected capacity is about 60,000 or more, except for 7 nm. There are also some 12, 16 nanometer processes that are also affected.
TSMC issued an official statement response
The third quarter of each year is the peak season for TSMC customers, especially the A12 series processors that will be launched on Apple's next-generation iPhone. In addition, TSMC will also give Huawei Qilin, Qualcomm, AMD, NVIDIA, etc. in the second half of the year. Customers produce 7nm chips.
I wonder if the TSMC fabs will be attacked by viruses at the same time. Will it affect shipments? In this regard, TSMC believes that the actual impact is relatively limited and does not affect the overall operating performance. Supply chain manufacturers point out that After shutting down for a few hours, it is expected to be re-produced. The impact should not be too great.
Of course, TSMC is currently in an emergency meeting, and details are still to be understood.
In addition, TSMC also issued an official statement today (August 4th) for the virus attack. TSMC officially announced the following:
The scope of virus infection has been controlled, and the affected machines are gradually resumed production. It is expected to return to normal in one day.
TSMC pointed out that some machines were infected with viruses on the evening of August 3, but they were not attacked by hackers. They have already controlled the scope of virus infection and found a solution. The affected machines are gradually resumed production.
The degree of virus infection varies from factory to factory. TSMC said that some factories have returned to normal within a short period of time, and the rest of the factories are expected to return to normal within one day.
Not a hacker?
It is worth mentioning that some Taiwanese media quoted Taiwanese industry sources as saying that the temporary shutdown of the TSMC production line was due to the use of the Japanese-made Murata in the production line, and the Taifu supply crane system (AMHS, automatic material handling system) was hacked.
TSMC responded by saying that it was not hacked as rumored, but some machines were infected with viruses.
In fact, in the past, some insiders analyzed that semiconductor manufacturers are often targeted by hackers. In order to steal key technologies and secrets, sometimes they attack thousands of semiconductor companies every day through the Internet. In addition, they are the founders of Alibaba Group. Ma Yun also said that he has to deal with hackers around the world every day.
In March of this year, the former TSMC Information Technology Senior Vice President and Information Director Zuo Dachuan officially retired. He was responsible for TSMC's corporate anti-hacking work. After he retired, TSMC allegedly spread all of Taiwan's North, Central and South China. The fabs are all attacked by viruses at the same time, which is very unexpected in the industry.
In the past, Zuo Dachuan’s anti-hacking work for TSMC has said that enterprise anti-hackers must do all kinds of precautions before and after entering the company. TSMC’s anti-hacking action is to take multiple layers of defense (Defense in Depth). In addition to blocking malicious programs or phishing programs through various software, in case there is a loophole in the protection, hackers enter the company, they will only be in a certain area, and can not do anything, but some hackers may have a hidden period of up to 400. For many days, TSMC developed a software inside, as long as these hackers acted, they were quickly caught. (Proofreading/Spring/Summer)
2. Taiwan production line downtime / disable personal 3C fortress how to break from inside?
The TSMC manufacturing system was invaded by computer viruses, causing a big crash in the North, South, and South China. The security crisis was not caused by hackers, but the infection of computer viruses meant that the fortress was the easiest to break from within, highlighting the security. No protection can stop for a moment.
TSMC's security personnel revealed that Zi'an is a big money job, and the company is more famous, and the effort and material resources are also the biggest. TSMC used to have the secrets of operating secrets in the past, and it has no investment in internal security protection. Compared with the amount of investment, it is not expected that this time the capital security crisis will still occur.
TSMC has shared internal security measures, emphasizing that it has abandoned past single-layer protection and changed to multi-layer protection. First, through various software, malicious attack programs or fishing letters are blocked before entering the corporate network. Vulnerabilities, hackers enter the company, and then layer-by-layer protection, limiting hackers to a certain area, and making them unable to do anything.
In addition, in order to avoid any possible attacks, TSMC prohibits any portable storage, mobile phones, computers, tape recorders or cameras from entering. Mobile phones must also use the company's customized mobile phones that can only connect to company-specific networks. Only after using a personal mobile phone.
In the past, TSMC spent a lot of effort to prevent hackers from invading. To protect trade secrets, the company's core data was encrypted and restricted, and the list of people who could see the information was restricted. Only when people arrived at the scene could they be opened; In addition to the card reader, the fingerprint machine recognizes the identity, monitors and monitors the entire process, and operates the computer to record the whole process. This ensures that even if the hacker enters, no file can be opened at all.
However, the strong protection is still a hundred secrets. This time, TSMC Computer Integrated Manufacturing (CIM) was invaded by viruses, which is a big loophole in the security, and it is just a slap in the face, but now it is not a hacker to steal secrets. It is a new type of virus that launches attacks and brings new challenges to TSMC.
Economic daily
3. TSMC's downtime shocked the world and fully resumed operations on Sunday;
TSMC confirmed yesterday that the production of the core 'Computer Integrated Manufacturing (CIM) system' was invaded by computer viruses the day before yesterday, causing the North, Central and South China factories to crash, re-injecting the software, and gradually resuming the software. This is TSMC. For the first time, the CIM system affected the operation of the factory due to virus infection. The internal emergency order was issued. I hope to restore all production lines today.
Zhang Zhongmou pays less than two months
Zhang Zhongmou, founder of TSMC, just retired on June 5th. On the evening of August 3, the most serious situation in which the machine was unable to operate due to virus infection appeared since the establishment of the company, and the impact was on bamboo, Zhongke and Nanke, and TSMC almost All Taiwan factories are affected.
Zi'an model student unexpectedly out of the package
In particular, TSMC is at the time of the sprint of the seven-nano and twelve-nano-capacity production capacity, and is the model for the protection of the entire Taiwanese security. The biggest production system since the establishment of the company has been a big blow, not only shocking the global supply chain, but also making TSMC feel Unprecedented shock and tension.
TSMC did not want to disclose the reason yesterday. It only said that the internal cause and source have been mastered. It can be judged that this is not a hacking attack, nor is someone deliberately locking the attack, and can ensure that the incident does not happen again. TSMC stressed that the virus has now Being controlled, there are also solutions, the affected machine is gradually resumed production; the degree of virus infection varies from factory to factory, some have returned to normal in a short time, and the rest is expected to return to normal within one day, that is, the slowest today.
TSMC does not comment on whether there is any incident in the incident. It only indicates that the current focus is on restoring production, and will communicate with customers. The internal responsibility is not discussed.
People familiar with security protection revealed that the people who put the virus were 'very powerful', and they were able to simultaneously spur the main production plants of Taiwan Semiconductor Manufacturing Co., Ltd., Zhongke and Nanke, and did not rule out the possibility of internal employees.
'The access control system is also hung up'
It is understood that TSMC found computer virus invading CIM at 10 o'clock in the evening, resulting in two Bagua factory Fab III, Fab V, and Bamboo Fab 12, Nanke Fab XIV, Zhongke Fab 15 and other 12-inch factory. Big crash. Some netizens broke the news on the kick-off kick (PTT) website, saying that 'I heard a lot of Taiwanese friends returning to the TSMC, and even the access control system is hung up.' Some even said, 'I heard the whole middle' , 'The access control crashed and then the production line crashed, I feel not simple.'
It is understood that TSMC recalled Zi'an and CIM maintenance engineers in the evening before yesterday morning and yesterday morning to fully repair. In order to avoid the theft of production secrets, the computer connection of all production systems and CIM was immediately cut off, resulting in a large factory in North, South and South. machine.
Production line crashes will affect revenue
The TSMC supply chain emphasizes that as long as the CIM is invaded by the virus, the system soft weight irrigation should be able to gradually resume production. However, market participants said that the production line will have an impact on the company's production capacity and revenue. This part is waiting for TSMC to do Further explanation. Joint newspaper
4. TSMC production line down: Loss is expected to be as high as 60 million US dollars
TSMC passed some machines 'poisoning', and the legal person estimated that TSMC's production interruptions must be scrapped from about 5,000 to 8,000 wafers, at $8,000 per piece, affecting TSMC's revenue of about 60 million US dollars this quarter.
TSMC estimates that NTD revenue will be about 257 billion to 260 billion yuan this quarter. The revenue target will be as short as 0.75% to 0.8%, which is indeed a small impact on TSMC.
After the news came out yesterday, the legal person circle followed the overtime to grasp the situation. At present, the legal person circle believes that the value of the scrapped wafers will affect the TSMC's revenue in this quarter may be within 1%.
According to the preliminary situation of semiconductor analysts of many corporate organizations, TSMC’s “poisoning” incident affected the scrapped wafers between 5,000 and 8,000 wafers, affecting revenues of approximately NT$2 billion, accounting for this quarter’s revenue ratio. 0.75%~0.8%, Huang Wenqing, deputy general manager of Taixin Investment, said that the impact is limited and the stock price should not be affected.
Some analysts also reminded that although the impact of TSMC's incident on the performance is small, the real focus of the case is that the follow-up still needs to pay attention to whether TSMC has mastered the path of viral infection. If it is unable to make a strong declaration, the market may I suspect that similar events in the future may happen again. Economic Daily