Hackers Claim 859MB Theft of Nintendo Employee Data

A hacking group identifying itself as ShadowByt3$ claims it took 859MB of Nintendo employee data on June 13 and is demanding a $2 million ransom. The group set a June 15 deadline for a response.

The archive the group describes reportedly contains full names, employee identification numbers, analytics and internal reports, and financial documents such as bank statements. ShadowByt3$ says the files were obtained from TINYpulse, an employee engagement and feedback platform operated by WebMD Health Services and used by some organizations for HR surveys and analytics.

The group has not provided public proof that can be independently verified. Security researchers and forensic analysts have not confirmed the breach or validated the contents of the alleged dataset.

Nintendo was contacted about the claim and did not immediately confirm any compromise of employee information. The company has not issued a public statement acknowledging a breach as of the latest reports.

If genuine, exposed personnel and financial records could be used for fraud, identity theft or targeted extortion. Incidents that exploit third-party HR and vendor platforms have been used in the past to access data tied to larger organizations.

Investigators typically look for evidence of unauthorized access, signs of data exfiltration, and whether credentials or internal systems were affected. Any employees found to be impacted would normally receive notification if a confirmed breach is identified.

Further technical details remain limited while researchers examine the claim and await comment from Nintendo or outside investigators. Additional information may be released if the claim is validated or if the parties involved publicly address the ransom demand.