{"id":17937,"date":"2022-03-02T02:26:10","date_gmt":"2022-03-02T02:26:10","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/03\/02\/nvidia-confirms-company-data-was-stolen-in-cyberattack-last-week\/"},"modified":"2022-03-02T02:26:10","modified_gmt":"2022-03-02T02:26:10","slug":"nvidia-confirms-company-data-was-stolen-in-cyberattack-last-week","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/03\/02\/nvidia-confirms-company-data-was-stolen-in-cyberattack-last-week\/","title":{"rendered":"Nvidia confirms company data was stolen in cyberattack last week"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Nvidia Corp. today said that company data was stolen in a cyberattack last week.<\/p>\n

In a statement, the company told PCMag<\/a>\u00a0that\u00a0\u201cwe are aware that the threat actor took employee credentials and some Nvidia proprietary information from our systems and has begun leaking it online.\u201d<\/p>\n

The ransomware attack was first reported on Friday,<\/a> with Nvidia at the time saying that it was investigating a potential cyberattack. The attack itself is believed to have taken place earlier in the week, with the Lapsus$ ransomware gang first taking credit for the theft of data on Feb. 24.<\/p>\n

Typically, ransomware would be involved in a case such as this and Lapsus$ is a known ransomware gang, having attacked\u00a0Portuguese media group\u00a0Impresa with ransomware in January<\/a>. Despite some reports<\/a> to the contrary, there is no proof that ransomware was used in the hack of Nvidia.<\/span><\/p>\n

Instead, it appears to be a case of data theft and extortion. Nvidia is also on the record as stating that it has no evidence of ransomware being involved.\u00a0<\/span><\/p>\n

\u201cOur team is working to analyze that information,\u201d an Nvidia spokesperson said. \u201cWe do not anticipate any disruption to our business or our ability to serve our customers as a result of the incident. Security is a continuous process that we take very seriously at Nvidia and we invest in the protection and quality of our code and products daily.\u201d<\/p>\n

Lapsus$ claimed on its Telegram channel that it had stolen 1 terabyte of information from Nvidia, including \u201chighly confidential\/secret data\u201d and proprietary source code. The gang demanded a ransom payment be made not to release the stolen data, but then the tale takes a turn into bizarre territory.<\/p>\n

In response to the attack, Lapsus$ claims<\/a> that Nvidia then targeted its computers with ransomware. The gang goes on to claim that Nvidia was able to encrypt the data, but it had a backup, meaning the data was \u201csafe from scum.\u201d<\/p>\n

The claim that Nvidia counter-hacked Lapsus$ is unproven, but if it did, it would certainly be a change in tactics for how the victim of a cyberattack responds to being targeted.<\/p>\n

\u201cSource code represents some of the most coveted crown jewels that a company like Nvidia possesses,\u201d Prakash Linga, co-founder and chief executive officer at code security company BluBracket Inc.<\/a>, told SiliconANGLE. \u201cAs attackers have shifted their focus to exploiting weaknesses in code, it is imperative to detect and prevent code risks in Git repositories that contain the source code.\u201d<\/p>\n

Photo: Nvidia<\/h5>\n
\n
\n

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.<\/span><\/h3>\n<\/div><\/div>\n