NVIDIA Confirms GeForce NOW Data Breach Impacting Armenian Users
**NVIDIA** has confirmed a data breach affecting its **GeForce NOW** cloud gaming service, specifically impacting users in Armenia. The breach, attributed to a compromise of a regional partner's infrastructure, exposed user data, though **NVIDIA** claims its own network remained secure.

**NVIDIA** has issued a statement to BleepingComputer confirming a data breach affecting **GeForce NOW** user information.
The gaming and hardware giant clarified that the impact is limited to Armenia, resulting from a compromise of infrastructure managed by a regional partner.
**NVIDIA** stated that its own network was unaffected by the incident.
"Our investigation found no impact on **NVIDIA**-operated services. The issue is limited to systems run by a third-party **GeForce NOW** Alliance partner based in Armenia. We are working closely with the partner to support their investigation and resolution. Impacted users will be notified by GFN.am," the company stated.
This announcement follows a post on a hacker forum last week by a threat actor using the **ShinyHunters** nickname, who claimed to have breached the **GeForce NOW** service and stolen millions of user records.
The threat actor alleges the stolen information includes full names, email addresses, usernames, dates of birth, membership status, and 2FA/TOTP status.
Furthermore, the actor posted samples of the stolen data and offered the full database for $100,000, payable in Bitcoin or Monero.
The **NVIDIA GeForce NOW** cloud gaming service allows users to stream games to their devices, leveraging more powerful hardware and **NVIDIA** GPUs in a data center.
GFN.am is the Armenian regional operator for **GeForce NOW**, responsible for operating **NVIDIA**βs service in the country. Alliance partner environments can operate independent authentication systems, local customer databases, regional billing platforms, and locally managed infrastructure.
A statement posted by GFN.am confirms a cybersecurity incident that occurred between March 20 and 26, exposing the following information:
* Full name (if using a Google account)
* Email address
* Phone number (if registered through a mobile operator)
* Date of birth
* Username
GFN.am clarified that no account passwords were exposed in the incident, and users who registered after March 9 are not affected.
According to **NVIDIA**βs help page, GFN.am also manages **GeForce NOW** operations in Azerbaijan, Georgia, Kazakhstan, Moldova, Ukraine, and Uzbekistan, although no impact on those countries has been confirmed.
BleepingComputer reports that the threat actorβs post has been removed from the hacker forum. It remains unclear whether the database was sold or deleted by the seller or forum administrators.
