Nintendo commented on reports of a possible employee data leak and rejected ransom demands made by the hacker group ShadowByt3$. The company stated that its own systems were not compromised, and the incident is related to the third-party service TinyPulse, which is used for internal employee surveys in Nintendo's American division.
Earlier, ShadowByt3$ claimed to have gained access to approximately 1 GB of data through the TinyPulse infrastructure. According to the attackers, the archive contains employee names, email addresses, survey results, analytical reports, banking documents, and other internal information. The group then demanded Nintendo pay $2 million.
In a comment to Kotaku, the company confirmed that it is aware of the problem but emphasized that it only concerns data from the TinyPulse service. According to Nintendo, the attackers did not gain access to customers' personal data or the company's financial information.
Nintendo also noted that it takes employee feedback seriously and is already cooperating with the service provider to address the consequences of the incident.
According to the group, some of the information has already appeared in the public domain. In addition, the attackers stated that the discovered materials indicate dissatisfaction among some employees within the company. However, Nintendo has not yet confirmed the authenticity of the published data and continues to insist that the scope of the incident is limited to the content of internal surveys.