- Joined
- Jan 20, 2026
- Messages
- 345
- Reaction score
- 2,694
The leak in Armenia has affected millions of accounts in several neighboring countries.
NVIDIA confirmed the data leak from some users of GeForce NOW, but the incident was not related to the company’s internal network. The problem affected the regional infrastructure of the service partner in Armenia, where GeForce NOW cloud gaming works through the local operator GFN.am.
The hack became known after publication on a hacker forum. The author of the message under the nickname “ShinyHunters” stated that he had access to the GeForce NOW database and stole millions of user records. However, later there was an assumption that the publication was made not a real ShinyHunters, but a person who pretended to be a member of this group.
According to the attacker, the database had names, email addresses, usernames, dates of birth, subscription status and information about the two-factor protection included. Part of the records were put as a sample, and the full base was offered to buy for 100 thousand dollars in Bitcoin or Monero. Now the message from the forum has been deleted, so it is not known whether the data or publication was saved by the author himself or the administration of the site.
As reported by NVIDIA, the services managed by the company itself were not affected. The investigation showed that the incident is limited to the systems of a third-party partner of the GeForce NOW Alliance in Armenia. NVIDIA helps GBFN.am with the verification and elimination of consequences, and the affected users should be notified by the local operator.
GFN.am confirms cyber indictment and clarified that the attack occurred between March 20 and 26. According to the company, the full name could be disclosed when registering through Google, e-mail address, phone number when registering through a mobile operator, date of birth and user name. Passwords of accounts, according to GFN.am, did not get into the leak.
The operator also reported that users who registered after March 9 were not injured. On the NVIDIA reference page, it is indicated that GFN.am is responsible for GeForce NOW not only in Armenia. However, there is no evidence that the leak affected these countries, too, is not yet available.
NVIDIA confirmed the data leak from some users of GeForce NOW, but the incident was not related to the company’s internal network. The problem affected the regional infrastructure of the service partner in Armenia, where GeForce NOW cloud gaming works through the local operator GFN.am.
The hack became known after publication on a hacker forum. The author of the message under the nickname “ShinyHunters” stated that he had access to the GeForce NOW database and stole millions of user records. However, later there was an assumption that the publication was made not a real ShinyHunters, but a person who pretended to be a member of this group.
According to the attacker, the database had names, email addresses, usernames, dates of birth, subscription status and information about the two-factor protection included. Part of the records were put as a sample, and the full base was offered to buy for 100 thousand dollars in Bitcoin or Monero. Now the message from the forum has been deleted, so it is not known whether the data or publication was saved by the author himself or the administration of the site.
As reported by NVIDIA, the services managed by the company itself were not affected. The investigation showed that the incident is limited to the systems of a third-party partner of the GeForce NOW Alliance in Armenia. NVIDIA helps GBFN.am with the verification and elimination of consequences, and the affected users should be notified by the local operator.
GFN.am confirms cyber indictment and clarified that the attack occurred between March 20 and 26. According to the company, the full name could be disclosed when registering through Google, e-mail address, phone number when registering through a mobile operator, date of birth and user name. Passwords of accounts, according to GFN.am, did not get into the leak.
The operator also reported that users who registered after March 9 were not injured. On the NVIDIA reference page, it is indicated that GFN.am is responsible for GeForce NOW not only in Armenia. However, there is no evidence that the leak affected these countries, too, is not yet available.
