Nintendo Details

    Organization Logo

    Nintendo

    Kyoto, Japan • employees • Media & Entertainment

    Industry

    Media & Entertainment

    Security Incidents

    1

    Nintendo Co., Ltd. is a Japanese multinational video game company headquartered in Kyoto. It develops, publishes and releases both video games and video game consoles.

    Security Incidents

    Nintendo Breach of Apr 2020
    Severity Score
    Moderate

    Type

    Credential Stuffing

    Summary

    In April 2020, Nintendo experienced a significant security breach where unauthorized access was gained to approximately 160,000 user accounts. The breach was attributed to threat actors exploiting the Nintendo Network ID (NNID) login system, which allowed them to access personal information such as nicknames, date of birth, country, and email addresses. Some users reported unauthorized purchases made through their accounts using linked payment methods like PayPal. Nintendo promptly disabled the NNID login system and urged affected users to enable two-factor authentication (2FA) to enhance acco...
    Show more

    Severity

    The breach was severe as it resulted in the illegal access of around 160,000 to 300,000 customer accounts in April 2020. Attackers used an account checker tool to identify compromised Nintendo accounts with vulnerable login credentials, indicating a sophisticated breach.

    Impact

    The breach impacted Nintendo account holders by exposing their login details to hackers, leading to unauthorized access and potentially illegal purchases. As a response, Nintendo had to forcefully reset passwords for all affected customers to prevent further unauthorized activities.

    KEEP YOUR ENVIRONMENT SECURE

    Weak credentials are the leading cause of breaches. Beyond Identity can help.

    See MFA exploits in action
    Watch how adversaries exploit companies in quick videos