GeForce NOW Armenia (GFN.am) Data Breach: 1,299,686 Records Exposed

HEROIC analysts logged a data breach record for GeForce NOW Armenia (GFN.am), dated March 7, 2026. It holds 1,299,686 records listing email addresses, usernames, first and last names, birthdays and phone numbers. Checking your email is the only way to learn whether you are among them.

Why a Username and a Birthday Travel So Well Together

A username that someone reuses on other sites is a lead an attacker can follow. Add a birthday and a phone number, and the same person can be impersonated to a help desk or a phone carrier. The record does not need a password to be useful for that kind of approach.

The Six Details Listed in the GFN.am Record

• Email addresses, the usual starting point for phishing messages and password reset abuse.
• Usernames, which help an attacker match this record to profiles on other sites.
• First names, used to make a scam message sound personal.
• Last names, which complete the picture once they are paired with a first name.
• Birthdays, a detail banks and carriers sometimes use to check identity.
• Phone numbers, a target for scam texts, calls and SIM swap attempts.

The listed data types include no passwords.

What an Attacker Can Do With This Mix

The first move is usually a message that quotes a genuine name or username and asks for a click. The second is a password guess on another service where the same email and username appear. A phone number lets the same attacker switch to text messages, which people often trust more than email.

How This Kind of Record Is Produced

A database breach is a copy of records taken from one service's own systems. It differs from a stealer log, which comes from an infected device, and from a combolist, which is a list of pairs gathered for reuse. Here the record describes the service's data, so a person can be listed without ever having done anything unsafe.

Is Your Email in the GFN.am Record?

Your next step is simple: scan your email to see your information. Then change the password you use for this service as a precaution, and watch for emails that pretend to come from it. Be careful with texts and calls that mention your birthday, and ask your phone carrier to add a PIN so nobody can move your number.

The same advice holds whether the address is one you use at home or at work.