At AMD, data security and the protection of our intellectual property are a priority. In December 2019, we were contacted by someone who claimed to have test files related to a subset of our current and future graphics products, some of which were recently posted online, but have since been taken down.TorrentFreak has more details about the matter. The site reports that AMD filed DMCA takedown notices against two Github repositories that contained stolen source code related to AMD's Nave 10, Navi 21 and Arden GPUs. The latter is the codename of the GPU that will be used by the next-gen Xbox Series X console.
While we are aware the perpetrator has additional files that have not been made public, we believe the stolen graphics IP is not core to the competitiveness or security of our graphics products. We are not aware of the perpetrator possessing any other AMD IP.
We are working closely with law enforcement officials and other experts as a part of an ongoing criminal investigation.
GitHub responded by taking down the sourcode code. TorrentFreak tracked down the leaker and was able to ask her some questions. The Navi GPU source code was reportedly discovered in November 2019, via a non-targeted attack:
“In November 2019, I found AMD Navi GPU hardware source codes in a hacked computer,” the person explained. “The user didn’t take any effective action against the leak of the codes.”The leaker confirmed to TorrentFreak that she has more source code that has not been made public yet. She added that she's looking to sell the source code and put a $100 million valuation on the hack. If no buyer appears for the illegally obtained code, she claims she will "just leak everything."
“The source code was unexpectedly achieved from an unprotected computer//server through some exploits. I later found out about the files inside it. They weren’t even protected properly or even encrypted with anything which is just sad.”
“I haven’t spoken to AMD about it because I am pretty sure that instead of accepting their mistake and moving on, they will try to sue me. So why not just leak it to everyone?” we were told.