Have I Been Pwned isn’t saying how they got this information, and Nvidia will not confirm or deny that the credentials of 71,000 employees were compromised, nor would it disclose whether it intends to comply with any of the hackers’ demands.
It’s worth noting that Nvidia employs significantly fewer than 71,000 people — its most recent annual report cites 18,975 people in 29 countries — but it’s possible that the hacked email addresses include former employees and aliases for groups of people. (Mailing lists are common in companies that rely significantly on email.) The company’s internal systems, including email, had been “totally hacked,” and a leak of 71,000 employee credentials would fit that description.
