Nvidia GeForce NOW data breach confirmed but luckily most of us will be
safe, here's why

Date:
Mon, 11 May 2026 22:40:00 +0000

Description:
The breach is limited to GeForce NOW users in just one country, and no passwords were stolen.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Attackers typosquatted an
OpenAI repo on HuggingFace, distributing an infostealer disguised as a
privacy filter model The malware disabled SSL checks, escalated privileges, and deployed the sefirah payload to steal credentials, crypto wallets, and system data The fake repo hit 244K downloads and briefly topped HuggingFace rankings before removal, with other linked malicious repos also taken down Nvidia GeForce NOW, a cloud-based gaming service which streams high-performance PC games to other devices, suffered a cyberattack recently, and lost sensitive customer data. However, the data seems to be limited to
one country only - Armenia.

A threat actor posted a new thread on an underground hacking forum, offering millions of user records for sale. The records, which allegedly include peoples names, email addresses, usernames, dates of birth, membership status, and 2FA/TOTP status, were being sold for a sum of $100,000, paid either in Bitcoin, or Monero. Latest Videos From You may like A fake OpenAI repository has taken top spot on Hugging Face but all it does is push infostealer malware Researchers find Nvidia GPUs are vulnerable to Rowhammer attacks Rockstar confirms major third-party data breach: GTA VI maker says 'no impact on our organization or our players' ShinyHunters, or imposters? Following the disclosure, Nvidia shared a statement with BleepingComputer , saying the breach was a result of a compromise in the infrastructure of a regional partner called GFN.am. This company manages all GeForce NOW operations in Azerbaijan, Georgia, Kazakhstan, Moldova, Ukraine, and Uzbekistan.

Our investigation found no impact on NVIDIA-operated services, Nvidia told
the publication. We are working closely with the partner to support their investigation and resolution. Impacted users will be notified by GFN.am."

The threat actor was using the ShinyHunters nickname, but the group
apparently confirmed that this is an imposter that has no connections to the actual group.

At the same time, GFN.am confirmed that the breach took place between March
20 and March 28 2026, and that the miscreants stole names, emails, phone numbers, dates of birth, and usernames. Passwords were not affected, and neither were people who registered after March 9. We dont know how many
people are affected. Are you a pro? Subscribe to our newsletter Sign up to
the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners
or sponsors By submitting your information you agree to the Terms &
Conditions and Privacy Policy and are aged 16 or over.

In the meantime, the forum post was deleted, which could mean a couple of things: either GFN negotiated with the attackers, or someone else purchased the database. It is also possible, since ShinyHunters confirmed this person
to be an imposter, that the forums administrators actually removed the
thread. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/nvidia-geforce-now-data-breach-confirme d-but-luckily-most-of-us-will-be-safe-heres-why


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)