Nintendo Confirms Employee Survey Data Exposed in TinyPulse Cyberattack Nintendo of America has acknowledged that employee survey data was compromised in a recent cyberattack targeting TinyPulse, a third-party platform used for internal feedback. The company stated that its own systems remained secure, with no customer or financial information accessed. The breach, disclosed following claims by the threat actor Shadowbyt3$, involved internal survey content tied to a small group of employees, most of which dated back several years. Nintendo emphasized that the incident was isolated to TinyPulse’s systems, not its internal infrastructure. However, Shadowbyt3$ alleged the breach was more extensive, claiming to have exfiltrated nearly 1GB of data, including full names, email addresses, bank statements, W-9 forms, and employee progress reports spanning 2016 to 2026. The group demanded a $2 million ransom, threatening to leak the data if unpaid. After Nintendo reportedly refused, Shadowbyt3$ released samples of direct messages and employee conversations, suggesting broader exposure. Nintendo continues to assert that the attack was limited in scope, while the threat actor maintains that sensitive employee data was stolen. The company is working with TinyPulse to address the incident. No further details have been provided at this time.