GeForce NOW Armenian operator GFN.am discloses customer-data breach; passwords unaffected
GFN.am’s breach exposed customer identity and contact details, with passwords unaffected. NVIDIA says its own services were untouched. GFN.am customers should check official notices and watch for phishing; no device update is required.
If you used GFN.am, visit its website directly to check notices or contact support, and enable two-factor authentication if available. Treat unexpected NVIDIA or GeForce NOW messages cautiously and sign in through the official site rather than message links. No device update is required for this breach.
What’s happening
GFN.am, the Armenian operator of GeForce NOW, disclosed unauthorised access to its customer database in May. Its detailed notice says email addresses, usernames and birth dates may have been exposed, alongside names for Google sign-ins and telephone numbers for mobile-operator registrations. Passwords and accounts registered after 9 March were unaffected. NVIDIA said its own services were untouched; impact in other countries served by the partner was not confirmed. GFN.am says it contained the breach and addressed the causes of access, but there is no customer software patch to install. An attacker advertised allegedly millions of records, an unverified claim; a completed sale and subsequent misuse remain unknown. As at 3 November, the reviewed sources do not establish a confirmed user total, completion of promised direct notifications or recovery of the exposed data.
- What
- Breach
- Affects
- GFN.am, the Armenian GeForce NOW partner service
- Fixed in
- Nothing to patch
- Since
- 4 May 2026
- Closed
- 3 Oct 2026
Timeline
- Update
An October review still found no officially confirmed affected-user total or complete list of affected accounts and countries.
- Update
BleepingComputer reported that an offer to sell allegedly millions of records for US$100,000 had disappeared; whether a sale occurred was unknown. The seller used the ShinyHunters name but was believed to be an impersonator.
- Update
NVIDIA told VideoCardz that its own services were unaffected. It limited the incident to its Armenian Alliance partner’s systems and said it was supporting the investigation.
- Vendor revised
The detailed notice listed possible exposure of emails, usernames, birth dates, Google-account names and mobile-registration telephone numbers, while excluding passwords. GFN.am said it had addressed the causes of unauthorised access and strengthened security.
- Made public
GFN.am publicly acknowledged the breach, said it had taken containment measures and promised direct notification to affected users within 24 hours.
- Update
GFN.am says it discovered the breach on 2 May.
- UpdateNothing to patch
GFN.am dates the database breach to 9 March and says later registrations were unaffected. BleepingComputer instead reports 20–26 March; the operator’s notice is the basis for this record’s start date.
Sources
- Security breachGFN.am · 4 May 2026
- Անվտանգության միջադեպ (Security incident)GFN.am · 5 May 2026
- NVIDIA confirms GeForce NOW data breach affecting Armenian usersBleepingComputer · 8 May 2026
- NVIDIA confirms GeForce NOW partner security breach, says its own systems were not affectedVideoCardz · 5 May 2026
- Nvidia confirms some user data may have been stolen in the Armenian GeForce Now breach, but not passwordsPC Gamer · 7 May 2026
- GFN.AM Data Breach: What GeForce NOW Users Need to KnowiTechGuides · 3 Oct 2026