Nintendo America Employee Data Exposed After Shadowbyt3$ Targets TinyPulse

A supply-chain breach of HR platform TinyPulse (owned by WebMD Health Services) resulted in Shadowbyt3$ exfiltrating and leaking employee records allegedly belonging to Nintendo of America. The extortion group demanded ransom from Nintendo and TinyPulse, published samples of allegedly stolen files (including W-9s, bank statements, names, emails and internal chat logs), and continues to leak data; Nintendo states the exposure is limited to a subset of employee survey responses but security analysts verified identifiable current employees in the samples. Affected personnel are advised to monitor tax filings, consider credit freezes, and watch for targeted phishing.