NVIDIA Rotates Customer SSH Keys After Brev Intrusion
Summary
NVIDIA says it detected unauthorized activity in Brev from October 4 to 20, 2026, potentially exposing client VM SSH keys. It rotated credentials across impacted environments and reported no observed misuse.
Key points
- NVIDIA reported unauthorized activity in its Brev infrastructure between October 4 and 20, 2026.
- SSH keys configured for client virtual machines may have been exposed; NVIDIA’s internal investigators reported no observed active misuse.
- NVIDIA rotated customer SSH credentials across impacted environments.
- NVIDIA urged account holders to review system logs, authorized_keys, services, background tasks, and outbound connections.
- The article recommends rotating API, database, and cloud credentials stored on instances, and isolating instances if suspicious activity is found.
Article Details
- Victim Organization
- NVIDIA
- Incident Type
- Unauthorized intrusion into Brev infrastructure, potentially exposing SSH keys configured for client virtual machines
- Data Types Exposed
- SSH keys (potentially exposed)
- Operational Impact
- NVIDIA rotated customer SSH credentials across impacted environments. Internal forensic investigators had not observed active misuse of the potentially exposed credentials.
- Claim Status
- confirmed