NVIDIA Confirms GeForce Data Breach Exposed User Personal Data

GFN Cloud Internet Services, operating as the regional NVIDIA GeForce NOW cloud gaming partner, GFN.AM has officially confirmed a significant data breach.

This security incident exposed the personal information of numerous users registered on their streaming platform.

While the company has now secured its database, the delayed discovery of the network intrusion highlights ongoing challenges in protecting sensitive user data within the rapidly expanding gaming industry.

Gaming platforms continue to be lucrative targets for threat actors due to the wealth of personal identifiers stored within their networks.

GeForce User Data Exposed in Confirmed NVIDIA Breach

According to the official security advisory, unauthorized access to the company’s internal database initially occurred on March 9, 2026.

Network administrators did not discover the malicious intrusion until nearly two months later, finally detecting the breach on May 2, 2026.

This extended dwell time allowed unauthorized third parties to navigate the network and access user records without raising immediate alarms.

The company clarified that the breach is entirely isolated to historical data, meaning only users who registered before the March 9 intrusion date are affected.

Anyone who created an account after the attack occurred remains completely secure from this specific data leak.

A critical positive note from the ongoing investigation is that user account passwords remain entirely secure and were not compromised during the attack.

Instead, the leaked database contains specific personal identifiers that cybercriminals frequently use for targeted social engineering campaigns and identity spoofing.

The exposed information includes user email addresses and the designated GFN.AM account usernames and personal dates of birth.

Furthermore, users who registered their accounts through a mobile operator had their phone numbers leaked to the attackers.

Individuals who utilized the Google single sign-on feature also had their real first and last names exposed to unauthorized parties.

Upon discovering the database intrusion in early May, GFN.AM immediately initiated its incident response protocols to secure the environment.

The internal security team successfully identified and eliminated the network vulnerabilities that initially enabled the unauthorized database access.

To prevent similar situations in the future, the organization has deployed additional technical and organizational security measures across its infrastructure.

These targeted upgrades are designed to significantly strengthen the overall protection architecture of their internal information systems.

Following the remediation efforts, the company formally apologized to the affected gaming community for the security lapse.

Although authentication credentials were not stolen, cybersecurity researchers warn that the exposed data creates a substantial risk for subsequent attacks.

Threat actors can easily use the stolen combinations of real names, dates of birth, phone numbers, and email addresses to craft highly personalized phishing emails or SMS messages.

These targeted attacks often trick users into revealing more sensitive financial information or inadvertently installing malware.

Affected gamers should remain highly vigilant against unexpected communications claiming to be from NVIDIA or GFN.AM support teams.

Users are strongly advised to monitor all communication channels for suspicious activity and enable two-factor authentication to ensure maximum security.

Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google