❌

Visualização normal

Antes de ontemStream principal

Nintendo America Employee Data Exposed After Shadowbyt3$ Targets TinyPulse

✇Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News
Por:Deeba Ahmed
19 de Junho de 2026, 10:49
Nintendo America employee records were exposed via TinyPulse after Shadowbyt3 claimed theft of HR files, tax forms, bank data, and staff survey responses.
  • ✇Firewall Daily – The Cyber Express
  • Nintendo Confirms Employee Data Exposed in TinyPulse Cyberattack Ashish Khaitan
    Nintendo of America has confirmed that employee survey data was exposed in the recent TinyPulse cyberattack, although the company emphasized that its own systems were not breached and that no customer or financial information was accessed. The disclosure follows claims by the threat actor Shadowbyt3$, which alleged it had stolen sensitive information linked to Nintendo employees.  In a statement addressing the TinyPulse cyberattack, Nintendo said it was aware of an issue involving TinyPulse,
     
  • ↗️

Nintendo Confirms Employee Data Exposed in TinyPulse Cyberattack

✇Firewall Daily – The Cyber Express
Por:Ashish Khaitan
19 de Junho de 2026, 03:59

TinyPulse cyberattack

Nintendo of America has confirmed that employee survey data was exposed in the recent TinyPulse cyberattack, although the company emphasized that its own systems were not breached and that no customer or financial information was accessed. The disclosure follows claims by the threat actor Shadowbyt3$, which alleged it had stolen sensitive information linked to Nintendo employees.  In a statement addressing the TinyPulse cyberattack, Nintendo said it was aware of an issue involving TinyPulse, a third-party platform used for internal employee surveys. According to the company, the incident was limited to data held by the service provider rather than Nintendo's internal infrastructure.  “We are aware of an issue involving TinyPulse, a third-party service used for internal employee surveys at Nintendo of America,” Nintendo stated.  The company further clarified that “Nintendo’s systems have not been compromised, and no personal customer or financial data has been accessed.” 

Nintendo Says Exposure Was Limited in the TinyPulse Cyberattack

According to Nintendo, the data affected by the TinyPulse cyberattack consisted of internal survey content involving only a small subset of employees. The company added that most of the information dated back several years.  “The data involved is limited to internal survey content comprising a small subset of our employees, and most of the information dates back several years,” Nintendo told media outlets.  Nintendo of America, a subsidiary of the Japanese gaming giant Nintendo, oversees operations across the United States, Canada, and parts of Latin America. TinyPulse is an employee engagement and feedback platform that supports anonymous surveys, workplace culture assessments, engagement analytics, and feedback collection.  Nintendo said it is currently “working with the service provider to address the issue.”  The Cyber Express has also reached out to Nintendo for additional details regarding the TinyPulse cyberattack. However, no further statement had been received at the time of publication. 

Shadowbyt3$ Claims Broader Data Theft

Despite Nintendo's assessment of the incident, the threat actor Shadowbyt3$ has claimed that the stolen information extends beyond employee survey responses and includes personal employee data.  In an initial message, Shadowbyt3$ alleged that nearly 1GB of data had been exfiltrated from Nintendo and gave the company 48 hours to enter negotiations before the information would be leaked.  The threat actor claimed the dataset contains full names, email addresses, analytics and survey data, bank statements, W-9 forms with employee IDs, progress plans, and reports spanning from 2016 to 2026.  “If you contact us we give you an extra day to think this through. We are demanding a ransom payment of 2 million dollars,” the Shadowbyt3$ post stated. 

Threat Actor Issues Additional Warnings

In a follow-up message, Shadowbyt3$ clarified that the alleged breach “doesn't affect nintendo gaming” but instead impacts “a small amount of employees that work for nintendo and have used tinypulse.”  The threat actor later published another post warning that more victims would emerge. The message included a link to allegedly leaked data containing direct messages and employee conversations, suggesting Nintendo did not agree to pay the $2 million ransom demand.  As of now, Nintendo maintains that the TinyPulse cyberattack was limited in scope and did not compromise its internal systems, while Shadowbyt3$ continues to assert that more sensitive employee information was stolen. 

Nintendo Alleged Data Breach: Threat Actor Demands $2M Ransom

✇Security | TechRepublic
Por:Ken Underhill
15 de Junho de 2026, 17:47

Nintendo faces an alleged data extortion incident involving HR records, internal reports, and potential exposure of third-party vendors.

The post Nintendo Alleged Data Breach: Threat Actor Demands $2M Ransom appeared first on TechRepublic.

  • ✇Arstechnica
  • Nintendo warns Switch 2 GameChat users: “Your chat is recorded” Kyle Orland
    Last month, ahead of the launch of the Switch 2 and its GameChat communication features, Nintendo updated its privacy policy to note that the company "may also monitor and record your video and audio interactions with other users." Now that the Switch 2 has officially launched, we have a clearer understanding of how the console handles audio and video recorded during GameChat sessions, as well as when that footage may be sent to Nintendo or shared with partners, including law enforcement. Before
     
  • ↗️

Nintendo warns Switch 2 GameChat users: “Your chat is recorded”

✇Arstechnica
Por:Kyle Orland
5 de Junho de 2025, 14:08

Last month, ahead of the launch of the Switch 2 and its GameChat communication features, Nintendo updated its privacy policy to note that the company "may also monitor and record your video and audio interactions with other users." Now that the Switch 2 has officially launched, we have a clearer understanding of how the console handles audio and video recorded during GameChat sessions, as well as when that footage may be sent to Nintendo or shared with partners, including law enforcement.

Before using GameChat on Switch 2 for the first time, you must consent to a set of GameChat Terms displayed on the system itself. These terms warn that chat content is "recorded and stored temporarily" both on your system and the system of those you chat with. But those stored recordings are only shared with Nintendo if a user reports a violation of Nintendo's Community Guidelines, the company writes.

That reporting feature lets a user "review a recording of the last three minutes of the latest three GameChat sessions" to highlight a particular section for review, suggesting that chat sessions are not being captured and stored in full. The terms also lay out that "these recordings are available only if the report is submitted within 24 hours," suggesting that recordings are deleted from local storage after a full day.

Read full article

Comments

© Aurich Lawson | Nintendo

❌
❌