NVIDIA Confirms GeForce NOW User Data Breach at Armenian Partner
Summary
NVIDIA confirmed a breach at its Armenian GeForce NOW partner exposed user information. NVIDIA says its own network was unaffected; GFN.am said passwords were not exposed. A forum post attributed to a ShinyHunters impersonator claimed a larger theft.
Key points
- NVIDIA said the breach was limited to systems operated by its third-party GeForce NOW Alliance partner in Armenia; NVIDIA-operated services were not affected.
- Exposed information included names, email addresses, phone numbers, dates of birth and usernames, depending on how users registered.
- GFN.am said passwords were not exposed and users who registered after March 9 were unaffected.
- A forum post claimed millions of records were stolen and offered the database for sale, but the poster using the ShinyHunters name was believed to be an impersonator.
- The forum post was later removed; it was unclear whether the database had been sold.
Article Details
- Victim Organization
- GFN.am, the Armenian regional GeForce NOW operator
- Victim Domain
- GFN.am
- Incident Type
- Data breach caused by compromise of a third-party regional partner's infrastructure
- Data Types Exposed
- Full names (for users registered with a Google account)
- Email addresses
- Phone numbers (for users registered through a mobile operator)
- Dates of birth
- Usernames
- Affected Records
- Unknown. A forum poster claimed millions of records were stolen, but that claim is unverified.
- Operational Impact
- The confirmed impact was limited to GFN.am systems in Armenia; NVIDIA-operated services were not affected. GFN.am said users who registered after March 9 were not impacted and no account passwords were exposed.
- Ransom Or Extortion
- A forum poster using the ShinyHunters name offered the alleged database for $100,000 in Bitcoin or Monero. The poster was believed to be an impersonator, and it is unclear whether the database was sold.
- Claim Status
- confirmed