Nvidia downplays hacking group ShinyHunters' claims of GeForce Now's “full database leak"

The notorious ShinyHunters hacking group, which previously demanded a ransom from Rockstar Games for financial data, has now attempted to target Nvidia. ShinyHunters claimed it had tapped into Nvidia’s GeForce Now cloud system and snagged user information.

While there were concerns about a widespread breach, Nvidia promptly stepped into the picture, confirming the security incident and explaining that the problem is isolated to a single regional provider.

Hacker group Shiny Hunters attempted to hack Nvidia GeForce Now global database

For context, ShinyHunters, in typical fashion, bragged about the incident and, in true hacker pride, claimed that it had “owned” Nvidia GeForce Now. The group said it obtained a “full database leak” of user accounts, personal information, email addresses, membership status, and further credentials.

Team Green Confirmed GeForce Now Data Security Breach, But It’s Limited to an Armenian Third-Party Partner

Nvidia, however, has refuted ShinyHunters’ claims. The company issued a response to VideoCardz and said, “Our investigation found no impact to Nvidia-operated services. The issue is limited to systems run by a third-party GeForce Now Alliance partner based in Armenia. We are working closely with the partner to support their investigation and resolution. Impacted users will be notified by GFN.am.”

GFN.AM’s Nvidia GeForce Now data breach might extend beyond Armenia; passwords have not been leaked

While things didn’t escalate into a global breach of user information, it’s still concerning that data of gamers using GeForce Now in Armenia has been breached. Furthermore, it’s important to note that other users in neighboring countries might also have been affected. GFN.am doesn’t provide GeForce Now access just in Armenia, but in a multitude of other countries as well, including Azerbaijan, Georgia, Kazakhstan, Moldova, Ukraine, and Uzbekistan.

These third-party partners run their own databases on local systems, so a security issue on their end affects their users but doesn’t ripple out to Nvidia’s primary database, comprising millions of global subscribers, in any shape or form.

GFN.am also issued its own update and stated, “We are aware of the security breach at GFN.am and have taken the necessary steps to contain it. We make every effort to protect data and take all claims seriously. Impacted users will be notified directly within the next 24 hours.”

According to reports, a range of credentials, including two-factor authentication metadata, has been leaked, but fortunately, GeForce Now users’ passwords have not been exposed.