NVIDIA this week acknowledged that employee credentials were stolen during a cyberattack on February 23 and confirmed the attackers have started leaking the information online.
The compromise occured on February 23 and impacted certain “IT resources,” an NVIDIA spokesperson told SecurityWeek.
“Shortly after discovering the incident, we further hardened our network, engaged cybersecurity incident response experts, and notified law enforcement,” the NVIDIA spokesperson added.
While the investigation into the incident continues, NVIDIA says that it hasn’t found evidence that ransomware was deployed on its network.
[ READ: Insurance Broker Aon Investigating Cyber Incident ]
“We are aware that the threat actor took employee credentials and some NVIDIA proprietary information from our systems and has begun leaking it online. Our team is working to analyze that information,” NVIDIA said.
A known ransomware gang called Lapsus$ claims to have stolen over 1 terabyte of data from NVIDIA. On a Telegram channel, the data-extortion gang confirmed it had started to publicly disclose the stolen data.
NVIDIA said it did not anticipate any business disruption. “Security is a continuous process that we take very seriously at NVIDIA – and we invest in the protection and quality of our code and products daily,” the spokesperson added.
Related: Conti Chats Leaked After Ransomware Gang Expresses Support for Russia
Related: Deadbolt Ransomware Targeting Asustor NAS Devices
Related: Researchers Devise Method to Decrypt Hive Ransomware-Encrypted Data
More from Ionut Arghire
- Vulnerabilities in OpenEMR Healthcare Software Expose Patient Data
- Russia-Linked APT29 Uses New Malware in Embassy Attacks
- Critical Vulnerability Impacts Over 120 Lexmark Printers
- BIND Updates Patch High-Severity, Remotely Exploitable DoS Flaws
- Microsoft Urges Customers to Patch Exchange Servers
- Iranian APT Leaks Data From Saudi Arabia Government Under New Persona
- 820k Impacted by Data Breach at Zacks Investment Research
- US Government Agencies Warn of Malicious Use of Remote Management Software
Latest News
- British Retailer JD Sports Discloses Data Breach Affecting 10 Million Customers
- Vulnerabilities in OpenEMR Healthcare Software Expose Patient Data
- Russia-Linked APT29 Uses New Malware in Embassy Attacks
- Meta Awards $27,000 Bounty for 2FA Bypass Vulnerability
- The Effect of Cybersecurity Layoffs on Cybersecurity Recruitment
- Critical Vulnerability Impacts Over 120 Lexmark Printers
- BIND Updates Patch High-Severity, Remotely Exploitable DoS Flaws
- Industry Reactions to Hive Ransomware Takedown: Feedback Friday
