Nvidia has acknowledged that it has been hacked, and that the perpetrator behind last week’s “incident” is releasing employee passwords and confidential information to the internet. The firm told PCMag, Bloomberg, and VideoCardz that it learned of the hack on February 23rd and that it “does not expect any interruption to [its] operations or our ability to service our customers as a result of the event.”
Lapsus$, a hacking collective, has claimed responsibility for the assault and demanded that Nvidia make its drivers open-source if it doesn’t want any more information published. Nvidia says it’s implemented security changes, alerted law authorities, and is working with cybersecurity specialists to respond to the incident.
According to PCMag, Lapsus$ claims to have about a terabyte of data from Nvidia. The hackers claim the hardware folder alone is 250GB and contains information on “all current Nvidia GPUs,” including the mystery RTX 3090 Ti, according to a message received by The Verge. The gang had threatened to publish the files in an earlier message if Nvidia didn’t remove the constraints on its newer graphics cards that were designed to make them less enticing to cryptominers. Lapsus$ revised its demands today, adding the need that Nvidia release its GPU drivers totally open-source indefinitely, and giving the business until Friday to respond.
Following Nvidia’s announcement that it was investigating an incident, there was conjecture that ransomware was involved, and that the assault was tied to the Russian-Ukraine conflict. Nvidia, on the other hand, claims that neither of these claims is valid.
The accused hacking group’s “past targets and near-native usage of Spanish and Portuguese in prior ransom notes imply that [it] works out of South America,” according to Toby Lewis, Head of Threat Analysis at dark web intelligence firm Darktrace. He also said that the organization is “very clandestine,” and that its attack on Nvidia appears to be a result of the chaos created by the events, rather than being driven by ties to the Russian government.