Nvidia shuts down forums after suspicious activity

Nvidia  has recently joined a whole heap of other huge name websites that have been effected by hackers this year. On July 12th Nvidia released the following statement and a week prior to that they had disabled the forums. The below statement is claiming that Nvidia has detected suspicious activity within the forums and has noted that no critical or personal details such as passwords were stored in clear text. So far the attack has gone unannounced by anyone with with the recent spate of attacks on high profile targets its really no surprise this has not happened earlier. The statement from Nvidia> Posted July 12, 2012 NVIDIA suspended operations of the NVIDIA Forums (forums.nvidia.com) last week. We did this in response to suspicious activity and immediately began an investigation. We apologize that our continuing investigation is taking this long. Know that we are working around the clock to ensure that secure operations can be restored. Our investigation has identified that unauthorized third parties gained access to some user information, including: – username

  • email address
  • hashed passwords with random salt value
  • public-facing "About Me" profile information

NVIDIA did not store any passwords in clear text. "About Me" optional profiles could include a user’s title, age, birthdate, gender, location, interests, email and website URL – all of which was already publicly accessible. NVIDIA is continuing to investigate this matter and is working to restore the Forums as soon as possible. We are employing additional security measures to minimize the impact of future attacks. All user passwords for our Forums will be reset when the system comes back online. At that time, an email with a temporary password, along with instructions on how to change it, will be sent to the user’s registered email address. As a precautionary measure, we strongly recommend that you change any identical passwords that you may be using elsewhere. NVIDIA does not request sensitive information by email. Do not provide personal, financial or sensitive information (including new passwords) in response to any email purporting to be sent by an NVIDIA employee or representative. We will post updates about this matter here. For any questions, email us at [email protected]. For technical support, go to www.nvidia.com/support.

About the author: Lee J

Security Analyst, Developer, OSINT, https://www.ctrlbox.com

Comments are closed.