{"id":"gfn-armenia-customer-data-breach-may-2026","category":"breach","status":"closed","title":"GeForce NOW Armenian operator GFN.am discloses customer-data breach; passwords unaffected","tldr":"GFN.am’s breach exposed customer identity and contact details, with passwords unaffected. NVIDIA says its own services were untouched. GFN.am customers should check official notices and watch for phishing; no device update is required.","summary":"GFN.am, the Armenian operator of GeForce NOW, disclosed unauthorised access to its customer database in May. Its detailed notice says email addresses, usernames and birth dates may have been exposed, alongside names for Google sign-ins and telephone numbers for mobile-operator registrations. Passwords and accounts registered after 9 March were unaffected. NVIDIA said its own services were untouched; impact in other countries served by the partner was not confirmed. GFN.am says it contained the breach and addressed the causes of access, but there is no customer software patch to install. An attacker advertised allegedly millions of records, an unverified claim; a completed sale and subsequent misuse remain unknown. As at 3 November, the reviewed sources do not establish a confirmed user total, completion of promised direct notifications or recovery of the exposed data.","action":"If you used GFN.am, visit its website directly to check notices or contact support, and enable two-factor authentication if available. Treat unexpected NVIDIA or GeForce NOW messages cautiously and sign in through the official site rather than message links. No device update is required for this breach.","product":"GFN.am, the Armenian GeForce NOW partner service","audience":"home","severity":"medium","patch":"na","exploited":true,"cves":[],"tags":["nvidia","geforce-now","gfn-am","armenia","data-breach","gaming"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Security breach","url":"https://gfn.am/en/blog/security-breach/","by":"GFN.am","date":"2026-05-04"},{"kind":"advisory","title":"Անվտանգության միջադեպ (Security incident)","url":"https://gfn.am/hy/blog/%D5%A1%D5%B6%D5%BE%D5%BF%D5%A1%D5%B6%D5%A3%D5%B8%D6%82%D5%A9%D5%B5%D5%A1%D5%B6-%D5%B4%D5%AB%D5%BB%D5%A1%D5%A4%D5%A5%D5%BA/","by":"GFN.am","date":"2026-05-05"},{"kind":"news","title":"NVIDIA confirms GeForce NOW data breach affecting Armenian users","url":"https://www.bleepingcomputer.com/news/security/nvidia-confirms-geforce-now-data-breach-affecting-armenian-users/","by":"BleepingComputer","date":"2026-05-08"},{"kind":"news","title":"NVIDIA confirms GeForce NOW partner security breach, says its own systems were not affected","url":"https://videocardz.com/newz/nvidia-confirms-geforce-now-partner-security-breach-says-its-own-systems-were-not-affected","by":"VideoCardz","date":"2026-05-05"},{"kind":"news","title":"Nvidia confirms some user data may have been stolen in the Armenian GeForce Now breach, but not passwords","url":"https://www.pcgamer.com/hardware/the-same-group-that-tried-to-ransom-rockstar-over-gta-6-says-it-has-breached-user-data-from-armenian-geforce-now-servers/","by":"PC Gamer","date":"2026-05-07"},{"kind":"news","title":"GFN.AM Data Breach: What GeForce NOW Users Need to Know","url":"https://www.itechguides.com/gfn-am-data-breach-what-geforce-now-users-need-to-know/","by":"iTechGuides","date":"2026-10-03"}],"started":"2026-05-04","closed":"2026-10-03","created":"2026-11-03T21:55:53.246Z","updated":"2026-11-03T21:55:53.246Z","cve_notes":[],"timeline":[{"at":"2026-10-03","added":"2026-11-03T21:54:09.841Z","kind":"other","text":"An October review still found no officially confirmed affected-user total or complete list of affected accounts and countries.","url":"https://www.itechguides.com/gfn-am-data-breach-what-geforce-now-users-need-to-know/","by":"iTechGuides","patch":null},{"at":"2026-05-08","added":"2026-11-03T21:54:09.841Z","kind":"other","text":"BleepingComputer reported that an offer to sell allegedly millions of records for US$100,000 had disappeared; whether a sale occurred was unknown. The seller used the ShinyHunters name but was believed to be an impersonator.","url":"https://www.bleepingcomputer.com/news/security/nvidia-confirms-geforce-now-data-breach-affecting-armenian-users/","by":"BleepingComputer","patch":null},{"at":"2026-05-05","added":"2026-11-03T21:54:09.841Z","kind":"other","text":"NVIDIA told VideoCardz that its own services were unaffected. It limited the incident to its Armenian Alliance partner’s systems and said it was supporting the investigation.","url":"https://videocardz.com/newz/nvidia-confirms-geforce-now-partner-security-breach-says-its-own-systems-were-not-affected","by":"VideoCardz","patch":null},{"at":"2026-05-05","added":"2026-11-03T21:54:09.841Z","kind":"vendor-revised","text":"The detailed notice listed possible exposure of emails, usernames, birth dates, Google-account names and mobile-registration telephone numbers, while excluding passwords. GFN.am said it had addressed the causes of unauthorised access and strengthened security.","url":"https://gfn.am/hy/blog/%D5%A1%D5%B6%D5%BE%D5%BF%D5%A1%D5%B6%D5%A3%D5%B8%D6%82%D5%A9%D5%B5%D5%A1%D5%B6-%D5%B4%D5%AB%D5%BB%D5%A1%D5%A4%D5%A5%D5%BA/","by":"GFN.am","patch":null},{"at":"2026-05-04","added":"2026-11-03T21:54:09.841Z","kind":"disclosed","text":"GFN.am publicly acknowledged the breach, said it had taken containment measures and promised direct notification to affected users within 24 hours.","url":"https://gfn.am/en/blog/security-breach/","by":"GFN.am","patch":null},{"at":"2026-05-02","added":"2026-11-03T21:54:09.841Z","kind":"other","text":"GFN.am says it discovered the breach on 2 May.","url":"https://gfn.am/hy/blog/%D5%A1%D5%B6%D5%BE%D5%BF%D5%A1%D5%B6%D5%A3%D5%B8%D6%82%D5%A9%D5%B5%D5%A1%D5%B6-%D5%B4%D5%AB%D5%BB%D5%A1%D5%A4%D5%A5%D5%BA/","by":"GFN.am","patch":null},{"at":"2026-03-09","added":"2026-11-03T21:54:09.841Z","kind":"other","text":"GFN.am dates the database breach to 9 March and says later registrations were unaffected. BleepingComputer instead reports 20–26 March; the operator’s notice is the basis for this record’s start date.","url":"https://gfn.am/hy/blog/%D5%A1%D5%B6%D5%BE%D5%BF%D5%A1%D5%B6%D5%A3%D5%B8%D6%82%D5%A9%D5%B5%D5%A1%D5%B6-%D5%B4%D5%AB%D5%BB%D5%A1%D5%A4%D5%A5%D5%BA/","by":"GFN.am","patch":"na"}],"url":"https://hard.fyi/live/gfn-armenia-customer-data-breach-may-2026/","json":"https://hard.fyi/api/live?id=gfn-armenia-customer-data-breach-may-2026"}