Nintendo denies system breach following third-party data leak

The breach centers on TinyPulse, a platform used by Nintendo to collect employee feedback and satisfaction surveys. According to reports, the stolen cache includes private messages, staff names, and survey results. The group behind the attack allegedly attempted to extort both Nintendo and TinyPulse, which is currently a subsidiary of WebMD Health Services.

Nintendo clarified that the incident involves only a small subset of its workforce and consists mostly of legacy data from several years ago. The company emphasized that no customer or financial information was accessed, stating it is actively coordinating with the service provider to mitigate the situation. This incident highlights the growing vulnerability of corporate ecosystems as attackers increasingly target third-party vendors to bypass primary security perimeters.