A third-party data breach at NVIDIA's Armenian GeForce NOW Alliance partner (GFN.am) exposed user data including names, email addresses, usernames, and dates of birth between March 20-26, 2026, though no account passwords were compromised. The attack vector was a compromise of the regional partner's infrastructure, not NVIDIA's core systems, and the incident was isolated to Armenia. No CVSS score, specific affected software versions, fixed versions, or workarounds are provided in the source article.
Data Security NVIDIA confirms GeForce NOW user data exposed in Armenian partner breach May 11, 2026 Share By SC Staff (Adobe Stock) As reported by Bleeping Computer, NVIDIA has confirmed that user information from its GeForce NOW cloud gaming service was exposed in a data breach. The incident, however, is limited to Armenia and was caused by a compromise of infrastructure operated by a regional partner, not NVIDIA's own network. A threat actor claimed to have breached GeForce NOW and stolen millions of user records, including full names, email addresses, usernames, dates of birth, and 2FA/TOTP status. NVIDIA clarified that its own systems were not affected and the issue was isolated to a third-party GeForce NOW Alliance partner in Armenia, identified as GFN.am. GFN.am confirmed a cybersecurity incident between March 20 and 26, exposing email addresses, phone numbers (if registered via mobile operator), dates of birth, and usernames. They stated that no account passwords were exposed and users who registered after March 9 were unaffected. While GFN.am also manages GeForce NOW operations in several other countries, no impact has been confirmed in those regions. The threat actor's post offering the data for sale has since been removed from the hacker forum. Source: Bleeping Computer SC Staff Related Application security Analysis reveals concerning features in official White House app SC Staff May 8, 2026 A security researcher known as Thereallo has found that the app can inject code into third-party websites, effectively hiding cookie consent banners, GDPR notices, and paywalls. Data Security FTC bans Kochava from selling location data without consent SC Staff May 6, 2026 The FTC's complaint detailed how Kochava collected and sold geolocation data from hundreds of millions of mobile devices, enabling clients to track users' movements to and from sensitive locations such as health clinics and places of worship. Security Operations Miles Taylor’s ‘GTFO ICE’ project allegedly exposed personal data of 17,662 users SC Staff May 6, 2026 The GTFO ICE website, intended as an advocacy tool to track and protest proposed Immigration and Customs Enforcement (ICE) detention facilities, reportedly suffered a significant data exposure due to an unprotected public REST API. Related Events Cybercast Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026 On-Demand Event Cybercast Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Bit Byte Ciphertext Cyclic Redundancy Check (CRC) Data Aggregation Data Encryption Standard (DES) Decryption Digital Signature Digital Signature Algorithm (DSA) Digital Signature Standard (DSS) You can skip this ad in 5 seconds