Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Nintendo Company (Nintendo.com)

Nintendo.com

Discovered 2026-06-12 17:50 UTC
Est. attack date 2026-06-12
Country JP

Description:

proof: https://mega.nz/folder/3kBzQKgR#rIhDePsPMeFpfEGTPopDVQ We are ShadowByt3$ a extortion as a service group. We stole close enough to 1gb. You have 48 hours to contact us nintendo or all data gets leaked. If you contact us we give you an extra day to think this through. We are demanding a ransom payment of 2 million dollars. Check your inbox if you work for nintendo and use TINYpulse or go login to tinypulse if the url in the leak looks familiar. You have 48 hours from this announcement then it gets leaked. You have till June 15 2026. size: 859.0MB Close enough to 1GB it contains the following: -full name first name, last name, email of employees -analytics - surveys - all reports exported - all bank statements of payment pdf and w9 forms with employee ids - all cheers exported - all wins dashboard and wall of wins exported - all progress plans exported - Reports from 2016 to up to date 2026 - Analytics of Employees contain conversations and personal feelings about work and more - Content library of personal questions and engagement analytics - TINYpulse and Nintendo top employees of Nintendo based on engagement

Infostealer activity detected by HudsonRock

Compromised Employees: 115

Compromised Users: 1237367

Third Party Employee Credentials: 32


External Attack Surface: 115


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domainabusecscglobal.com
MX Records
  • mxb-0030bd01.gslb.pphosted.com. Proofpoint
  • mxa-0030bd01.gslb.pphosted.com. Proofpoint
TXT Records
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
  • google-site-verification=lcC2m3GxLFXRpw4s4cKbn8Q6jDs8zHPXp9CC1xHn70c
  • facebook-domain-verification=zffjg4xb0s79r0y3tbdeflv57xwpj5
Cloud / SaaS Services Detected
Proofpoint