Did Nvidia's security team know about Jensen Huang's affairs and the Megaspeed probe?

Two months after David Reber, Nvidia’s longtime chief security officer, stepped down citing health reasons, CEO Jensen Huang departed the company amid scrutiny of his personal relationships. The timing has prompted questions about whether Nvidia’s security apparatus was aware of federal investigations into Megaspeed, a Singapore-based data center firm suspected of funneling chips to China, or of Huang’s alleged affairs with employees.

Leadership transitions and unanswered queries

Reber, who served four years as CSO and seven years at Nvidia overall, announced his departure in late August via LinkedIn. He disclosed a diagnosis of young-onset Parkinson’s disease made more than two years prior, stating that family and health needed to come first. His successor, Saša Zdjelar, joined from ReversingLabs after 17 years at ExxonMobil and one year at Salesforce. Neither Reber nor Zdjelar responded to inquiries regarding the transition or the security team’s knowledge of the ongoing issues.

Nvidia also declined to answer related questions. While no public record links the leadership changes directly to the Megaspeed matter, the sequence of events raises questions about internal awareness. Relationships with subordinates typically fall under HR, legal, and board oversight rather than security purview. However, an affair involving an executive at a company under federal investigation presents distinct risks. Megaspeed has denied any wrongdoing.

Vulnerabilities exploited by intelligence services

Security specialists note that foreign intelligence services often exploit personal vulnerabilities. Nicholas Eftimiades, a retired senior intelligence officer who has trained over 1,000 corporate security professionals, explained that information collection frequently occurs through everyday conversation rather than hacking, making such risks difficult for security teams to identify. Eftimiades, author of Chinese Espionage Operations and Tactics, noted that security resources are often limited because they do not drive revenue, leading CEOs to restrict funding to minimum compliance levels.

Don Aviv, CEO of Interfor International, and author Jeremy Hurewitz argued in The Hill that many companies define security too narrowly, focusing on facilities and cyberattacks while neglecting insider threats. They urged greater attention to the cultivation of executives by foreign services, suspicious business relationships, and conflicts of interest. Eftimiades provided a hypothetical scenario where a CEO complaining about board resistance inadvertently identifies the obstacle to intelligence assets, who then target that individual’s communications.

Scope of known relationships and investigations

Reports indicate that some individuals within Nvidia were aware of aspects of the situation. The New York Times reported earlier this week that Nvidia’s top lawyer engaged with the government’s Megaspeed inquiry more than a year ago, though Nvidia stated it regularly contacts officials. Reports suggest colleagues knew of Huang’s relationships, even if the behavior is not expressly forbidden by Nvidia’s code of conduct. The Times cited five employees who said Huang was involved with a vice president reporting directly to him, while Reuters later reported a second relationship based on two sources.

It remains unclear if this information reached the security team. Eftimiades pointed out that rival intelligence services often seek policy insight rather than technology, identifying key influencers and blockers in export rule changes. He described the infiltration process as akin to cancer spreading once inside the body. This playbook is particularly relevant for China, according to Eftimiades, who noted that executives dealing with the country often report being approached. Unlike Soviet-era spying, these cultivated relationships now last years rather than weeks.

Technological augmentation and future implications

Human intelligence operations can be augmented by technology such as IMSI catchers, devices that mimic cell towers to intercept nearby phone connections. Basic versions cost approximately $1,000 and fit in a suitcase, while government-grade models are significantly more expensive. Eftimiades stated that it is unknown if such tools were used against Huang, whose phone was presumably hardened to detect compromises. As the board’s independent investigation and federal inquiries proceed, clarity may emerge regarding what Nvidia’s security team knew and whether they could have acted.

Eftimiades expressed hope that the episode serves as a wake-up call for U.S. industry, which he described as mostly clueless about Chinese tactics. He estimated that trillions of dollars in intellectual property have been lost, concluding that current protective measures are ineffective.