cyber.hendryadrian.com
Cyber Attack & Data Breach · bleepingcomputer.com

Nintendo Confirms Employee Survey Data Stolen Through TinyPulse

· Original article ↗

Summary

Nintendo confirmed that data from internal employee surveys was stolen from third-party service TinyPulse, but said its own systems and customer and financial data were unaffected. Shadowbyt3$ claimed a larger theft and demanded $2 million; the leaked data was not验证ed.

Key points

  • Nintendo confirmed that internal survey content affecting a small subset of employees was stolen from third-party service TinyPulse; most of the data dates back several years.
  • Nintendo said its own systems were not compromised and no customer or financial data was accessed.
  • Shadowbyt3$ claimed it stole close to 1GB of data and demanded a $2 million ransom.
  • The actor alleged the data included employee details and internal records; BleepingComputer did not download the leaked data or verify its authenticity.
  • Nintendo said it is working with TinyPulse’s service provider to address the issue.

Article Details

Victim Organization
Nintendo of America
Incident Type
Data theft from the third-party TinyPulse employee survey service used by Nintendo of America; Nintendo said its own systems were not compromised.
Data Types Exposed
  • Internal employee survey content (confirmed by Nintendo; affected a small subset of employees, with most information dating back several years)
  • Full names, email addresses, analytics and survey data, bank statements, W-9 forms, employee IDs, progress plans, and reports (claimed by Shadowbyt3$; not independently verified)
  • Employee direct messages and conversations (allegedly included in leaked data; authenticity not confirmed)
Affected Records
A small subset of employees; the exact number was not disclosed.
Affected Data Size
Close to 1 GB, as claimed by Shadowbyt3$; not independently verified.
Operational Impact
Employee survey information held by the third-party TinyPulse service was exposed. Nintendo said its systems were not compromised and that no customer or financial data was accessed.
Ransom Or Extortion
Shadowbyt3$ demanded $2 million and gave Nintendo 48 hours to engage in negotiations before threatening to leak data. A later post linked to data allegedly including employee conversations. No ransom payment or settlement was reported.
Claim Status
confirmed

Threat Actors

ShadowByt3$Claimed responsibility for stealing Nintendo-related employee data, said it had taken close to 1 GB, and demanded a $2 million ransom. Nintendo confirmed theft of limited internal survey content, but the article did not independently verify the actor's broader data claims or the authenticity of the alleged leaked data.

Vendors

WebMD Health ServicesBleepingComputer contacted WebMD Health Services, the owner of the TinyPulse platform, for more information about the incident and its impact, but we did not receive a response by publishing time.

Products

TinyPulseNintendo of America confirmed that threat actors stole survey data from its third-party TinyPulse service, while stressing that its own systems were not compromised and no customer or financial data was accessed.