Nvidia confirms that they have suffered a "cybersecurity incident"
Nvidia's hackers have started to leak data online
Published: 1st March 2022 | Source: Nvidia - Via Hardwareluxx |
Nvidia confirms that its security has been breached
On February 23rd, Nvidia's internal systems were attacked and hackers were able to extract a lot of important data from these systems. The hacking group LAPSUS$ has claimed to be behind the attack, extracting 1TB of data from Nvidia's systems.
LAPSUS$, Nvidia's claimed attackers have claimed that they have grabbed important data from the company, including code for their drivers/firmware. This data could reportedly be used to remove Nvidia's LHR (Low Has Rate) cryptocurrency mining limiter from Nvidia's latest RTX 30 series graphics cards. LAPSUS$ has demanded that Nvidia remove LHR from their RTX 30 series graphics cards, or they will "take actions".
Nvidia has released the following statement to HardwareLuxx about the attack.
On February 23, 2022, NVIDIA became aware of a cybersecurity incident which impacted IT resources. Shortly after discovering the incident, we further hardened our network, engaged cybersecurity incident response experts, and notified law enforcement.
We have no evidence of ransomware being deployed on the NVIDIA environment or that this is related to the Russia-Ukraine conflict. However, we are aware that the threat actor took employee credentials and some NVIDIA proprietary information from our systems and has begun leaking it online. Our team is working to analyze that information. We do not anticipate any disruption to our business or our ability to serve our customers as a result of the incident.
Security is a continuous process that we take very seriously at NVIDIA – and we invest in the protection and quality of our code and products daily.
Nvidia has confirmed that their data breach will not impact their day-to-day business, and that they have not been affected by ransomware. The attack used employee credentials to access proprietary information, and Nvidia is currently investigating the stolen data and analysing it.
You can join the discussion on Nvidia's cybersecurity incident on the OC3D Forums.