Story perspectives

Hackers Demand $2 M After Leaking 859 MB Nintendo Data

6/18/2026

Summary

ShadowByte$ Demands Ransom

ShadowByte$ demanded $2 million from Nintendo, claiming to have stolen 859 MB of data.
The stolen files cover 2016-2026 and contain employee names, emails, HR surveys, analytics and planning documents.
Metadata shows the data was extracted on January 28 2026.
Cybernews matched some leaked names to current Nintendo staff, suggesting the breach is authentic.
Nintendo has not confirmed the breach, though the ransom note cites TinyPulse as a possible source.

Summary

Nintendo Under Attack

Nintendo has faced multiple high-profile cyber breaches as gaming-sector cybercrime surges.
The 2022 “gigaleak” exposed Nintendo 64, GameCube and Wii files, showing large-scale data exposure.
Earlier this year the Crimson Collective claimed access to unreleased Nintendo code and tools, indicating repeated targeting.
Analysts say HR platforms like TINYpulse are increasingly exploited industry-wide, revealing a systemic vulnerability.

History

Historical Context

In April 2011, Sony’s PlayStation Network suffered an external intrusion that exposed personal data of about 77 million users and forced a 24-day outage. The breach sparked lawsuits, regulatory scrutiny, and lasting security reforms across the gaming sector. Sixteen years later, Nintendo faces a $2 million extortion demand from the ShadowByte$ group after a breach of its HR platform, highlighting the industry’s ongoing vulnerability.

1 of 3

ShadowByte$ Demands Ransom

ShadowByte$ demanded $2 million from Nintendo, claiming to have stolen 859 MB of data.
The stolen files cover 2016-2026 and contain employee names, emails, HR surveys, analytics and planning documents.
Metadata shows the data was extracted on January 28 2026.
Cybernews matched some leaked names to current Nintendo staff, suggesting the breach is authentic.
Nintendo has not confirmed the breach, though the ransom note cites TinyPulse as a possible source.

1 / 3