Shadowbyt3$ claims Nintendo of America breach, stealing ~1GB of employee data from TinyPulse survey platform and demanding $2M ransom


Nintendo of America has confirmed suffering a third-party data breach incident, but played down its severity.

An “extortion-as-a-service” hacking group called Shadowbyt3$ recently claimed to have breached Nintendo of America, a subsidiary of the Japanese gaming giant, operating in the United States, Canada, and some Latin America countries, and exfiltrated sensitive data on its employees.

Read more…
Source:  TechRadar News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • A timeline of South Korean telco giant SKT’s data breach

    May 8, 2025

    In April, South Korea’s telco giant SK Telecom (SKT) was hit by a cyberattack that led to the theft of personal data on approximately 23 million customers, equivalent to almost half of the country’s 52 million residents. At a National Assembly hearing in Seoul on Thursday, SKT chief executive Young-sang Ryu said about 250,000 users have ...

  • Top ticket resale platform hit by data breach

    May 6, 2025

    Ticket reselling platform Ticket To Cash kept an unprotected database online, exposing sensitive information on hundreds of thousands of customers, experts have warned. The database was discovered by cybersecurity researcher Jeremiah Fowler, who managed to get in touch with the company and get the database locked down, sharing the details withVPNMentor. Ticket To Cash is a ...

  • TikTok fined €530M for EU data breach

    May 2, 2025

    TikTok has been hit with a €530 million penalty by the Irish Data Protection Commission (DPC) for violating EU privacy laws following a probe into the platform’s transfer of European user data to China. The watchdog found that the company breached the bloc’s data protection rules through unlawful transfers of European user data to China, giving ...

  • Dating app Raw exposed users’ location data and personal information

    May 2, 2025

    A security lapse at dating app Raw publicly exposed the personal data and private location data of its users, TechCrunch has found. The exposed data included users’ display names, dates of birth, dating and sexual preferences associated with the Raw app, as well as users’ locations. Some of the location data included coordinates that were specific ...

  • Millions of users possibly at risk after Ascension healthcare reveals new data breach, potentially linked to Cl0p ransomware

    May 1, 2025

    One of the biggest private healthcare systems in the US, Ascension, has notified patients that personally identifiable information (PII) including health data, was stolen in a previously unannounced attack affecting a former business partner in December 2024. The incident follows a previous ransomware attack in May 2024, in which the sensitive data of six million patients, ...

  • Email Attacks Drive Record Cybercrime Losses in 2024

    May 1, 2025

    The FBI’s Internet Crime Complaint Center (IC3) has released its 2024 Internet Crime Report. And it has revealed a record-breaking surge in cybercrime losses across the United States. Last year, total losses reached $16.6 billion, which is a 33% increase from the previous year. Email continues to be the most exploited attack vector, with cybercriminals using ...