Nvidia confirms GeForce Now user data leak via Armenian partner

Nvidia has confirmed that some GeForce Now user data has been exposed in a breach, but the incident did not originate in the company's own infrastructure. Instead, it affected systems operated by a regional partner in Armenia, the operator GFN.am, BleepingComputer reports.

The breach came to light after a post on a hacking forum. A user going by the handle "ShinyHunters" claimed to have obtained access to the GeForce Now database and stolen millions of user records. A subsequent assessment suggested the post may not have come from the real ShinyHunters group, but from someone impersonating a member of the collective.

According to the attacker, the stolen database contained first and last names, email addresses, usernames, dates of birth, subscription status, and information about whether two-factor authentication was enabled. A portion of the records was posted as a sample, with the full dataset offered for sale at $100,000 in Bitcoin or Monero. The forum post has since been removed.

Nvidia said that services operated directly by the company were not affected. An investigation determined that the incident was limited to the systems of a third-party GeForce Now Alliance partner in Armenia. Nvidia is assisting GFN.am with the investigation and remediation, while affected users are to be notified directly by the local operator.

GFN.am confirmed the cyber incident and said the attack took place between March 20 and 26. According to the company, the exposed data may include the full name used during registration via Google, email address, phone number used during registration via mobile carrier, date of birth, and username. GFN.am stated that account passwords were not included in the leak.

The operator also clarified that users who registered after March 9 were not affected. Nvidia's support page indicates that GFN.am operates GeForce Now beyond Armenia, but there is currently no confirmation that the breach extended to other countries in the region.