tf-amd.com Listed by lockbit3 Ransomware Group

On April 05, 2023, TF-AMD Microelectronics (Penang) Sdn. Bhd., a Malaysian assembly and test provider for high-performance computing solutions, appeared on the LockBit 3.0 ransomware leak site. The listing states that internal files were exfiltrated during a ransomware attack. The company, formerly known as AMD Export Sdn. Bhd. and based in Penang, has not publicly quantified how many individuals or records are affected, nor has it detailed the precise data categories involved beyond the generic description of internal files.

Details from the Leak Site

The primary disclosure on the LockBit 3.0 onion site indicates that TF-AMD suffered a ransomware intrusion in which attackers successfully exfiltrated files before encrypting systems. The listing does not specify the volume of data taken, the exact file types exposed, or any deadline for ransom payment. It simply states the company as a victim and offers proof-of-compromise samples typical of the group’s public shaming tactic. No subsequent update on the site has altered that status as of the initial publication date.

Why This Matters for You and Your Family

When a supplier in the semiconductor and high-performance computing supply chain is breached, the ripple effects reach ordinary customers and employees. Your personal data may sit inside vendor records, employee rosters, or partner spreadsheets that the company handled. If those internal files contained names, contact details, government identifiers, or financial information tied to you or your family, the exposure creates long-term risk of identity theft, phishing, and account takeover. Even when exact record counts remain unknown, the confirmed exfiltration of internal files means you must treat your information as potentially public.

Doxxing and Identity-Chain Risks

Ransomware operators rarely stop at one dataset. A single leaked email, phone number, or employee handle from TF-AMD can be chained with credentials from other breaches to map your entire digital life. Attackers link gaming usernames, family addresses, and children’s accounts to build detailed profiles for extortion or identity fraud. Credential leaks of this nature frequently cascade into gaming account takeovers, where children’s profiles become entry points for further doxxing. The result is a persistent identity chain that can surface months or years later on dark-web marketplaces or extortion forums.

LockBit 3.0 Track Record

Public reporting attributes the LockBit 3.0 variant to a ransomware-as-a-service operation that first gained prominence in 2020 and rebranded to version 3.0 in early 2022. The group has targeted organizations across manufacturing, healthcare, education, and technology sectors, including several high-profile victims in Asia. Their typical playbook involves initial access through compromised remote desktop credentials or phishing, followed by rapid lateral movement, data exfiltration, and dual extortion: threatening both encryption and public leak of stolen files. LockBit 3.0 affiliates frequently set short payment deadlines and escalate by publishing victim data on their leak site when demands are ignored.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Rotate any password you ever used at TF-AMD or its predecessor AMD Export anywhere it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts vulnerable to credential chaining.
• Let remediation specialists manage takedown requests for any exposed personal records that appear on data broker sites or extortion platforms.

The incident underscores that even specialized manufacturers in trusted supply chains can become gateways to personal exposure. Staying ahead requires proactive steps rather than reactive searches. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Source: LockBit 3.0 leak site listing (via ransomware.live).