Nintendo Acknowledges Employee Data at Risk Following Third-Party Service Breach
Nintendo has confirmed a data breach impacting employee information, stemming from an issue with TinyPulse, a third-party service used for employee surveys. The company stated its own servers were not compromised and that no customer or financial data was accessed. An extortion group, ShadowByt3$, claimed responsibility for the breach and demanded a ransom, threatening to leak various employee details.
Nintendo has acknowledged a data breach that includes employee information. This follows claims that the company's own systems had been hacked.
In a statement, Nintendo clarified that its servers were not impacted. However, it confirmed an issue with TinyPulse, a third-party service it utilizes for employee surveys.
Posts on social media indicate that a group calling itself ShadowByt3$ has demanded a $2 million ransom. The group threatened to leak the names, email addresses, and bank records of Nintendo employees, alongside survey data, progress plans, and details of top-performing staff.
A Nintendo spokesperson affirmed that the company's systems had not been compromised and that no personal customer or financial data had been accessed. The spokesperson added that the involved data is limited to internal survey content from a small subset of employees, with most of the information dating back several years.
Nintendo made no suggestion of engaging with the extortion group and indicated it expects the survey data to be posted online. The company stated it appreciates employee feedback and is working with the service provider to address the issue.
According to IGN, this situation is not expected to result in the leak of development details and assets, unlike previous high-profile data leaks associated with Nintendo and Pokémon developer GameFreak.
