:

NINTENDO CONFIRMS DATA THEFT IN TINYPULSE BREACH

SECURITY DESK1 MIN READ
FRI, JUN 19, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Nintendo of America confirmed that threat actors stole survey data from TinyPulse, a third-party service used internally by the company. Nintendo's own systems were not compromised in the incident.

The stolen data came from TinyPulse, an employee engagement platform used by Nintendo for internal surveys. The breach affected the WebMD subsidiary's systems, though details on the scope of compromised information remain limited. Nintendo emphasized that the intrusion was contained to the third-party service and did not extend to its core infrastructure or customer-facing systems. The company has not disclosed the number of affected employees or specific details about the survey data accessed. The incident underscores ongoing risks associated with third-party service providers, even when direct company systems remain secure. Nintendo joins a growing list of major organizations affected by breaches involving external vendors and contractors. No indication has been provided regarding which threat actors were responsible or whether they attempted to exploit the data publicly.

■ SOURCES

Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Google is developing a security feature that would prevent policy-installed extensions from hijacking the New Tab page or changing the default search engine. The change aims to protect users from unwanted browser modifications.

14H AGOIndustry Desk

Apple's security vulnerability reporting system is overwhelmed by AI-generated submissions, forcing the company to cap researcher submissions and inadvertently blocking legitimate critical bugs from review.

16H AGOAI Desk

AI-discovered vulnerabilities are rarely exploited in the wild, according to VulnCheck data. Just 1.3 percent of AI-found security flaws see confirmed attacks.

17H AGOAI Desk

A federal judge has refused xAI's request to halt Minnesota's law banning deepfake nude-generating applications. The ruling allows the state's restrictions to proceed as scheduled.

YESTERDAYAI Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.