Nintendo Says Customer Data Safe After Hacker Group Demands $2 Million Ransom
- Snehal Pandey
- 2 minutes ago
- 3 min read
Nintendo says no customer financial or personal data was compromised after hacker group ShadowByt3$ claimed to have stolen employee survey information and demanded a $2 million ransom.
Following the allegations raised by a hacking organization that claims to have stolen sensitive data belonging to the company and asked for a $2 million ransom in return for not disclosing the stolen data, the gaming console manufacturer Nintendo has come forward with a strong statement in this regard. It is reported that the hacking organization known as ShadowByt3$ claims to have gotten hold of 1GB worth of sensitive data belonging to Nintendo, which has caused security concerns for the potential exposure of sensitive details relating to both employees and companies.
It is reported that the recent hack has happened through the use of TinyPulse, a third-party survey tool that is being used by Nintendo of America for employee feedbacks and surveys for the purpose of gauging their satisfaction levels. The hacking group claims to have got access to 859MB of data, containing employee names, emails, survey data, financial reports, and other internal information covering a period of ten years from 2016 to 2026. ShadowByt3$ has set a deadline of June 15 and also issued an ultimatum for the payment of a $2 million ransom amount.
While Nintendo admitted the occurrence of the breach on the external survey tool, the corporation reassured its customers that the breach was contained to the third party only. Furthermore, Nintendo assured its customers that its networks, gaming facilities, and databases were safe during the whole event. On the part of Nintendo, the company responded that it is currently collaborating with TinyPulse to look into the situation.
Also Read: Qualcomm Snapdragon Reality Elite Could Change AI Smart Glasses and Mixed Reality Forever
The most important thing for Nintendo's players around the world was when Nintendo assured its customers that there was absolutely no compromise of personal consumer data, including any payments related. According to Nintendo, the only compromised data included the data from the employee surveys done externally and was not connected with any customers or Nintendo Switches and/or payment systems whatsoever.
The event points to the increasing cybersecurity threats posed by third-party vendors and software firms. In cases where a company’s internal computer systems stay secure from cyberattacks, hackers will always find ways to launch their attacks on other software applications, which have access to employee, customer, or operation information.
In this case, the video game firm does not seem interested in negotiating or paying the ransom request. Nevertheless, cybersecurity professionals advise against making any payments to cybercriminals because they can never guarantee that your information will be deleted or not released to the public domain.
This is far from being the first time that such an issue has affected Nintendo. In the course of years, there have been multiple occasions on which the game developer was accused of leaking confidential materials, including development files, internal documents, and information related to their upcoming projects. One of the largest leaks to date happened in 2024 when a significant portion of Game Freak's (a developer of Pokémon) data was reportedly compromised and posted online. This data included the source code and information about future Pokémon projects.
For the time being, Nintendo insists that this incident is rather isolated and doesn't present a threat to the security of their clients' data. However, in connection with the breach, Nintendo is currently cooperating with TinyPulse and working on securing all employee-related information. Given the growing frequency of cyberattacks against major gaming companies, this incident only highlights the importance of proper security measures.