Nvidia confirms that criminals have stolen company data and started leaking it. Nvidia says it has not been affected by ransomware and does not expect the leaked data to disrupt its business.
“We are aware that the attacker has stolen employee login credentials and certain classified information from Nvidia,” Nvidia wrote in a statement posted online by Hardwareluxx. Nvidia also confirms that stolen data is being leaked. The GPU manufacturer says it is still investigating that information, but says it does not expect it to lead to “any disruption to our business or our ability to serve our customers.”
Nvidia will not respond to the criminals’ demand to remove the Lite Hash Rate limitation from video cards. Ransomware gang Lapsus$ claims to have stolen 1TB of data from Nvidia, including drivers, firmware, documentation, SDKs and ‘everything about Falcon’. Falcon stands for FAst Logic CONtroller and that is the embedded microcontroller for security in Nvidia GPUs. The criminals said they would “forget” the stolen data if Nvidia removes the LHR limitation from its GPUs.
Lapsus$ claims to be able to remove the LHR restriction with the captured data. The criminals offer the documentation and source code for it for sale. The group says it’s “not a good idea” to just share it, because video cards could be damaged. However, the criminals also claim that with the data leaked to the public so far, it would theoretically be possible to ‘fuck with LHR’.
Statement from Nvidia via Hardwareluxx
“On February 23, 2022, NVIDIA became aware of a cybersecurity incident which impacted IT resources. Shortly after discovering the incident, we further hardened our network, engaged cybersecurity incident response experts, and notified law enforcement.
We have no evidence of ransomware being deployed on the NVIDIA environment or that this is related to the Russia-Ukraine conflict. However, we are aware that the threat actor took employee credentials and some NVIDIA proprietary information from our systems and has begun leaking it online. Our team is working to analyze that information. We do not anticipate any disruption to our business or our ability to serve our customers as a result of the incident.
Security is a continuous process that we take very seriously at NVIDIA – and we invest in the protection and quality of our code and products daily.”