AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
Nintendo–TinyPulse Data Breach
Coverage from Tech Insider, Rescana, and others
The incident involved employee-related information held by TinyPulse, a third-party survey and engagement service used by Nintendo of America.
A threat actor claimed to have stolen company data and demanded a ransom; Nintendo confirmed a breach connected to the provider, while saying Nintendo’s own systems were not compromised and that the affected material was limited to a small group of employees, with most dating back several years. The case highlights the distinction between a company’s internal systems and data entrusted to an outside service, as well as the difficulty of establishing the scope and contents of a breach from claims and public statements.
Looking Back
27 Day Timeline
Jun 15
Jun 19
Jun 24
Jun 28
Jul 2
Jul 7
Jul 11
All Articles21 articles
Important
ShadowByt3$ extortion claims against TinyPulse in June 2026 led Nintendo of America to confirm theft of a subset of employee HR and financial-related records.
7/11/2026 • Data Breaches & Exposure Events • General
Nintendo of America confirmed on June 18, 2026 that TinyPulse SaaS was compromised and employee survey data was exfiltrated in a ransom extortion incident.
6/21/2026 • Data Breaches & Exposure Events • General
SHADOWBYT3$ claimed an alleged Nintendo data breach via TINYpulse, demanding $2 million and threatening a leak if payment was not made.
6/15/2026 • Data Breaches & Exposure Events • General
Interesting
Nintendo of America said Shadowbyt3$ targeted TinyPulse, a third-party HR survey platform, and released samples of stolen employee data.
6/19/2026 • Data Breaches & Exposure Events • General
ShadowByte$ claimed an 859 MB Nintendo corporate data breach with a $2 million ransom demand, while Nintendo attributed the incident to a TinyPulse provider weakness.
6/18/2026 • Data Breaches & Exposure Events • General
ShadowByt3$ demanded $2 million after claiming to steal TinyPulse employee feedback data used by Nintendo, with threats issued on June 13 and June 14.
6/17/2026 • Data Breaches & Exposure Events • General
Nintendo said a suspected breach tied to TinyPulse did not compromise internal systems and did not expose customer data.
6/17/2026 • Data Breaches & Exposure Events • General
ShadowBytes issued a June 12 ransom threat to leak 859MB of Nintendo employee data and later targeted TinyPulse after the ransom demand was not met.
6/17/2026 • Data Breaches & Exposure Events • General
ShadowByt3$ demanded $2 million ransom from Nintendo after claiming a breach via TinyPulse, with Nintendo reporting employee data impact only.
6/17/2026 • Data Breaches & Exposure Events • General
Nintendo confirmed a TinyPulse third-party breach involving internal employee survey data, with reported $2 million ransom demand during ongoing investigation.
6/17/2026 • Data Breaches & Exposure Events • General
On June 13, 2026, threat actor SHADOWBYT3$ claimed an unverified Nintendo breach involving about 859 MB of TINYpulse employee data.
6/16/2026 • Data Breaches & Exposure Events • General
ShadowBytes threatened Nintendo with a $2 million ransom demand over an alleged TinyPulse employee data breach in a dispute over breach scope and data age.
6/16/2026 • Data Breaches & Exposure Events • General
Nintendo issued a statement in connection with a TinyPulse third-party breach after reported exposure claims involving Nintendo of America employee survey data.
6/16/2026 • Data Breaches & Exposure Events • General
ShadowByte$ allegedly extorted Nintendo with a $2 million demand after claiming theft of employee HR and engagement data, as Cybernews researchers reviewed leaked samples.
6/15/2026 • Data Breaches & Exposure Events • General
A threat actor using SHADOWBYT3$ claimed on June 13, 2026 that Nintendo data was stolen from TINYpulse systems, but confirmation is unavailable.
6/15/2026 • Data Breaches & Exposure Events • General
A June 13, 2026 breach claim alleges SHADOWBYT3$ accessed about 859MB from TINYpulse systems used for Nintendo employee engagement data, with verification pending.
6/15/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Threat actor SHADOWBYT3$ claimed a Nintendo breach on June 13, 2026, alleging exposure of employee and financial data sourced from TINYpulse systems.
6/15/2026 • Data Breaches & Exposure Events • General
Nintendo of America confirmed a TinyPulse third-party breach after Shadowbyt3$ claimed employee data theft and a $2 million ransom demand with a 48-hour negotiation window.
6/20/2026 • Data Breaches & Exposure Events • General
Nintendo disclosed a TinyPulse-linked breach after ShadowByte claimed access to internal employee survey and communication data and demanded $2 million ransom.
6/18/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Nintendo of America confirmed a TinyPulse third-party incident involving internal employee survey data while stating Nintendo systems were not compromised.
6/18/2026 • Data Breaches & Exposure Events • General
Nintendo of North America reported a TinyPulse third-party issue after ransomware extortion claims, saying Nintendo systems were not compromised and customer data was not accessed.
6/17/2026 • Data Breaches & Exposure Events • General