NVIDIA confirms GeForce NOW data breach affecting Armenian users
NVIDIA's GeForce NOW breach exposed Armenian users' names, emails, and phone numbers via a third-party partner, yet the company insists its own network remains untouched.
A data breach at NVIDIA's GeForce NOW cloud gaming service has exposed personal details of users in Armenia, revealing once again how third-party partners create weak links in even the most sophisticated tech supply chains.
The compromise, which NVIDIA confirmed directly to BleepingComputer, occurred between March 20 and 26 on systems run by GFN.am, the Armenian regional operator. Impacted records include full names for those using Google accounts, email addresses, phone numbers for mobile registrations, dates of birth, and usernames. NVIDIA was quick to stress that its core network escaped harm: "Our investigation found no impact on NVIDIA-operated services. The issue is limited to systems run by a third-party GeForce NOW Alliance partner based in Armenia."
GFN.am echoed the limited scope in its own statement, noting that no account passwords were stolen and that anyone who signed up after March 9 remains unaffected. The operator also manages GeForce NOW in Azerbaijan, Georgia, Kazakhstan, Moldova, Ukraine, and Uzbekistan, though NVIDIA has confirmed no breach beyond Armenia so far.
The incident surfaced publicly when a threat actor posting under the ShinyHunters name claimed on a hacker forum to have stolen millions of records, including membership status and 2FA/TOTP details. Samples were posted, with the full database priced at $100,000 in Bitcoin or Monero. That post has since vanished, and investigators now believe the actor was likely an imposter rather than the real ShinyHunters group.
GeForce NOW allows users to stream demanding games from NVIDIA's datacenters. Alliance partners like GFN.am run independent authentication, local customer databases, regional billing, and their own infrastructure, a structure that clearly left Armenian users exposed while the parent company's defenses held.
The breach raises an uncomfortable question for NVIDIA's global footprint: how many other regional partners are one compromise away from leaking customer data, and how quickly will users outside Armenia learn if their information was quietly shopped on the dark web?
Original reporting: BleepingComputer.
More in Business
- IMF Chief Warns of Economic Divergence and Debt Risks Amid Artificial Intelligence Boom
Kristalina Georgieva suggests that while AI could significantly boost global growth, it simultaneously threatens to widen inequality and exacerbate inflationary pressures and public debt burdens.
- California Limits Utility Profits and Expands Home Energy Role
Gov. Gavin Newsom signed laws capping utility returns on lower-risk projects and accelerating virtual power plant development.
- Lyft to Pay $272.5 Million in Record California Wage-Theft Settlement
Largest such settlement in state history resolves claims that Lyft misclassified drivers as independent contractors from 2016 to 2020, denying them core wage protections.