NewsPublished 18 Jun 2026

Nintendo confirms data stolen in WebMD subsidiary cyberattack

Source Bleeping Computer

Description

Nintendo of America has confirmed to BleepingComputer that threat actors stole survey data from the third-party TinyPulse service used internally, but its systems were not compromised. [...]

Impact

The breach exposed internal employee survey data and possibly sensitive personal employee information such as names, email addresses, bank statements, and tax forms. No customer or financial data from Nintendo systems was compromised. The incident poses a risk to affected employees' privacy and may lead to extortion or identity theft attempts. Nintendo's operational systems and customer data remain secure and unaffected.

Defensive guidance

Nintendo is working with the TinyPulse service provider to address and remediate the breach. Since Nintendo's own systems were not compromised and customer data was not accessed, no direct action is required from customers or account holders. Organizations using third-party services should review their vendor security posture and monitor for any further disclosures or ransom demands. Law enforcement advises against paying ransoms as it encourages further attacks and does not guarantee data deletion.

References

bleepingcomputer.com/news/security/nintendo-confirms-data-stolen-in-webmd-subsidiary-cyberattack/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 18 Jun 2026, 18:37 UTC

References

Community reviews

Related threats