Nintendo of America has confirmed that threat actors stole survey data from the TinyPulse service, a third-party platform used internally, during a cyberattack on WebMD’s subsidiary. The breach did not compromise Nintendo’s own systems, according to a statement provided to BleepingComputer.
The stolen data originated from TinyPulse, a tool for employee feedback surveys, not from Nintendo’s internal network. The company clarified that no sensitive customer or financial information was exposed in the incident.
The attack targeted WebMD Health Corp.’s subsidiary, which manages TinyPulse. Nintendo is one of several organizations using the service that were affected by the breach.
Nintendo has not disclosed the number of employees impacted or the specific nature of the stolen survey data. The company is working with law enforcement and conducting an internal review, though no further technical details have been released.
WebMD and its subsidiaries have not yet issued a public statement on the breach. BleepingComputer’s report is based solely on Nintendo’s confirmation, and the full scope of the incident remains unclear.