Security News > 2020 > April > Nintendo data breach reportedly caused by credential stuffing
Attackers used an account checker tool to identify Nintendo accounts with compromised and vulnerable login credentials, says SpyCloud.
The recent data breach that hit Nintendo affected 160,000 people, resulting in account takeovers and financial losses for a host of users.
In this type of credential stuffing campaign, criminals use account checker tools to quickly scan lists of stolen account credentials, typically derived from older data breaches.
The Nintendo accounts affected by the breach were vulnerable because people were using passwords that had been exposed in previous data breaches.
SpyCloud said that the checker tool was able to extract specific billing and account information from the breached accounts, including Gold Points balance, Nintendo Store or Nintendo eShop balance, PayPal subscription ID, credit card type, card expiration date, currency denomination, the first six digits of the credit card number, and the last four digits of the credit card number.
News URL
Related news
- Dutch Police: ‘State actor’ likely behind recent data breach (source)
- Comcast and Truist Bank customers caught up in FBCS data breach (source)
- ADT discloses second breach in 2 months, hacked via stolen credentials (source)
- Internet Archive hacked, data breach impacts 31 million users (source)
- Internet Archive data breach, defacement, and DDoS: Users’ data compromised (source)
- Fidelity Investments says data breach affects over 77,000 people (source)
- Fidelity Data Breach Exposes Data of Over 77,000 Customers (source)
- USDoD hacker behind National Public Data breach arrested in Brazil (source)
- Tech giant Nidec confirms data breach following ransomware attack (source)
- Insurance admin Landmark says data breach impacts 800,000 people (source)