
Via: blogs.nvidia.com/Nvidia
Via: blogs.nvidia.com/Nvidia
The notorious hacking group has been problematic for tech and gaming giants recently. It looks like ShinyHunters have targeted yet another goliath; this time around, it's NVIDIA.
ShinyHunters have claimed that they have successfully hacked into the NVIDIA GeForce NOW cloud services, obtaining a "full database leak" of user accounts, personal information, email addresses, membership status, and further credentials.
As per a report by VideoCardz, NVIDIA has broken its silence on ShinyHunters' illegal wrongdoing, stating, "Our investigation found no impact to NVIDIA-operated services. The issue is limited to systems run by a third-party GeForce NOW Alliance partner based in Armenia. We are working closely with the partner to support their investigation and resolution. Impacted users will be notified by GFN.am."
According to NVIDIA's statement to VideoCardz, the breach is confined to systems operated by a GeForce NOW third-party Alliance partner, GFN.am, which is based in Armenia.
Also, several reports suggest that users' passwords have not been leaked, which is a positive sign for the security and safety of user information.
ShinyHunters’ Track Record Adds Weight to NVIDIA Breach Claims
ShinyHunters has previously been linked to multiple high-profile breaches which involved companies like Ticketmaster and Banco Santander, building a reputation for targeting large organizations.
This makes the claims concerning, even when the company says that its core infrastructure remains unaffected.
As Notebookcheck cited, third-party users actually run their own databases on local systems. So, when a security scrutiny occurs, only the users connected to that particular database are affected, not impacting NVIDIA's primary database.
Moving ahead, GFN.am has stated, "We are aware of the security breach at GFN.am and have taken the necessary steps to contain it. We make every effort to protect data and take all claims seriously."
GFN.am not only provides GeForce NOW in Armenia but also in other countries, such as Azerbaijan, Georgia, Kazakhstan, Moldova, Ukraine, and Uzbekistan.
It is notifying users directly, and affected users are advised to be cautious of any phishing emails that use NVIDIA branding.
NVIDIA’s third-party breach highlights the need for stronger security measures across all partners to protect users' personal data, as recent cases like Rockstar Games also raise concerns.
Read more at Gaming Community by Max Level!
Written by

Dhruv Singh
Edited by

Pulkit Prabhav