The same group that tried to ransom Rockstar over GTA 6 says it has breached user data from Armenian GeForce Now servers
Hacking group ShinyHunters claims to have breached Nvidia’s GeForce Now service, specifically targeting Armenian servers. The group announced on a black hat forum that they obtained “millions of real user records” containing first and last names, email addresses, dates of birth, membership status, and 2FA status information.
This represents the same group that previously attempted to extort Rockstar Games over leaked Grand Theft Auto 6 footage. The theft of 2FA status is particularly concerning, as it enables bad actors to target accounts while knowing whether two-factor authentication is enabled, making compromise easier.
Nvidia disputed some of ShinyHunters’ claims regarding the breach’s scope. The company has advised Armenian GeForce Now users to change their passwords and enable two-factor authentication to secure their accounts.
The incident underscores growing security challenges affecting gaming platforms and cloud gaming services. ShinyHunters’ repeated targeting of high-value gaming industry entities—first Rockstar, now Nvidia—suggests the group is strategically focusing on lucrative targets within the gaming ecosystem.