TSMC says a virus infected its fabrication tools on Friday night and shut down several factories, some of which won't restart at least until Sunday
- Some factories back to normal, rest in another day, TSMC says — Virus that struck Friday night ‘was not caused by hacker’
Context & Ripple Effects
TSMC's Friday-night virus outbreak hit the world's most concentrated chipmaking operation: fabrication tools across several fabs went dark at once, and while the company insists it was not a hacker attack, some lines will stay down until Sunday. A follow-up report shows 80% of impacted tools recovered by Monday, so the outage window is days, not weeks — but at TSMC's utilization levels even days translate into real wafer output lost.
The post-mortem matters more than the outage itself: reporting on how unchecked software for a new manufacturing tool carried WannaCry into the fabs points to a supply-chain hygiene gap rather than an external intrusion. The incident also foreshadows a pattern — TSMC's operations have since been tested again by the April 2024 Taiwan earthquake and a LockBit ransomware claim against stolen data, making fab-level resilience a recurring story rather than a one-off.
First-order effects
- TSMC's direct customers lose wafer starts for the duration of the shutdown, with some fabs idle until Sunday and full tool recovery only expected Monday.
- TSMC's own disclosure that the virus 'was not caused by a hacker' shifts blame toward internal tool-integration practices, putting its equipment onboarding process under scrutiny.
Second-order effects
- Equipment and software vendors shipping tools into TSMC fabs face mandatory malware screening requirements, adding cost and lead time to every installation.
- Buyers who single-source advanced nodes from TSMC get a live demonstration of concentration risk, strengthening the case for dual-sourcing and buffer inventory across the chip supply chain.
Third-order effects
- If the pattern holds — virus in 2018, ransomware exposure in 2023, earthquake losses in 2024 — fab cybersecurity and disaster resilience become procurement criteria as important as node geometry, and regulators treating leading-edge foundries as critical infrastructure gain their strongest argument.
- Repeated disruption at a single dominant supplier accelerates the geographic diversification logic behind TSMC's overseas fab buildouts, despite the margin dilution management has forecast for those ramps.
The trend: As chipmaking concentrates in fewer fabs, TSMC's recurring operational shocks — malware, ransomware, earthquakes — keep converting local incidents into global supply events, pushing resilience to the top of the industry's agenda.