NVIDIA confirms GeForce NOW user data exposed in Armenian partner breach

As reported by Bleeping Computer, NVIDIA has confirmed that user information from its GeForce NOW cloud gaming service was exposed in a data breach. The incident, however, is limited to Armenia and was caused by a compromise of infrastructure operated by a regional partner, not NVIDIA's own network.

A threat actor claimed to have breached GeForce NOW and stolen millions of user records, including full names, email addresses, usernames, dates of birth, and 2FA/TOTP status. NVIDIA clarified that its own systems were not affected and the issue was isolated to a third-party GeForce NOW Alliance partner in Armenia, identified as GFN.am. GFN.am confirmed a cybersecurity incident between March 20 and 26, exposing email addresses, phone numbers (if registered via mobile operator), dates of birth, and usernames. They stated that no account passwords were exposed and users who registered after March 9 were unaffected.

While GFN.am also manages GeForce NOW operations in several other countries, no impact has been confirmed in those regions. The threat actor's post offering the data for sale has since been removed from the hacker forum.

Source: Bleeping Computer