Nintendo fans report spate of unauthorised account access attempts

guest · Apr 20, 2020

Nintendo fans report spate of unauthorised account access attempts
Enable 2FA now
April 20, 2020
https://www.eurogamer.net/articles/...-report-spate-of-unauthorised-access-attempts

Nintendo Switch owners are reporting a wave of unauthorised account access attempts, in what looks a significant spate of attacks.

Twitter user Pixelpar, founder of Nintendo fan site LootPots, had his account accessed "numerous times overnight" yesterday from new locations, and received a string of warning email messages alerting him to the breach.
A Eurogamer staff member experienced the same thing on Friday.

Several users whose accounts were accessed and who had Paypal linked reported funds being accessed to buy Fortnite's VBuck currency.
Click to expand...

Nintendo is yet to acknowledge the problem, but just over a week ago tweeted a notice encouraging fans to enable enhanced verification for their Nintendo Accounts.

The process takes less than two minutes to complete and uses the free Google Authenticator app for iPhone and Android phones. It's a good idea - especially if you have Paypal or any other payment methods linked and are at all concerned.
At the very least, signing into the Nintendo Account website lets you look at your Sign-In History to check the locations you have been logged in. It's under your "Sign-in and Security Settings".
Click to expand...

Nintendo Account Holders Report Being Illicitly Accessed, Used to Buy Fortnite V-Bucks

We are seeing numerous reports of Nintendo Accounts being illicitly accessed, and used to buy $100’s worth of V-Bucks for Fortnite.
Previously we reported that Nintendo of Japan had urged its users to use two-step verification, after “In April, the number of inquiries stating that ‘You have been unauthorizedly logged into your Nintendo Account and your credit card has been illegally used’ has been increasing.” (Translation: Google Translate)

Now, we are seeing more reports of western users suffering the same issues. Numerous users on Twitter [1, 2, 3, 4, 5, 6, 7, 8, 9, 10] claim that their accounts had been accessed, and their linked Paypal accounts used to buy $100 USD’s worth of V-Bucks for Fortnite.
Click to expand...

guest · Apr 20, 2020

Nintendo accounts are getting hijacked—including one of ours
Let our staffer's woes be a reminder: change passwords, enable 2FA ASAP
April 21, 2020
https://arstechnica.com/gaming/2020/04/nintendo-accounts-are-getting-hijacked-including-one-of-ours/

Throughout the month of April, and particularly this weekend, users of online Nintendo accounts on devices like the Switch have reported receiving email notices that their accounts have been accessed by outside parties. Our ability to verify these claims was bolstered by an unfortunate intrusion on Monday: the hijacking of an Ars Technica staffer's account.

Roughly one hour before this article's publication, Reviews Editor Ron Amadeo received a plain-text email notice from Nintendo, titled simply, "[Nintendo Account] New Sign-In."
The email caught Amadeo's attention in part because all of his Nintendo devices are, in his words, "collecting dust."

Nintendo did not immediately respond to Ars Technica's questions about the source of the breach or about what credentials and personal details may have been accessed by intruders.
Click to expand...

But with a Nintendo account, the possibilities open a bit wider if any valid payment credentials have been saved. This is because of how Nintendo "eShop" purchases work in certain regions of the world.
The potential harm only gets worse if the leak includes payment credentials or home addresses and phone numbers—but we're still waiting to hear whether those leaked.
Click to expand...

guest · Apr 22, 2020

mood said: ↑

Nintendo accounts are getting hijacked—including one of ours April 21, 2020
Click to expand...

Updated:

Update, April 21: Hours after the company's European arm issued a statement to Eurogamer, formally asking all of its users to turn on 2FA, a Nintendo of America representative offered a nearly identical statement to Ars Technica:

We are aware of reports of unauthorized access to some Nintendo Accounts and we are investigating the situation. In the meantime, we recommend that users enable two-step verification for their Nintendo Account as instructed here: [...]
Click to expand...

Nintendo says it’s investigating reports of unauthorised account logins
April 21, 2020
https://www.videogameschronicle.com...ating-reports-of-unauthorised-account-logins/

More than 50 users replied to Twitter and Resetera threads last weekend claiming to have had their Nintendo accounts illegally accessed.
In a statement sent to VGC, Nintendo said: “We are aware of reports of unauthorized access to some Nintendo Accounts and we are investigating the situation. In the meantime, we recommend that users enable two-step verification for their Nintendo Account as instructed here.

Earlier this month Nintendo said it had seen an increase in unauthorised logins and that third-parties were accessing users’ credit card data.
Click to expand...

guest · Apr 24, 2020

Nintendo Confirms That Around 160,000 Accounts May Have Been Hacked, Personal Info Possibly At Risk
Emails, date of birth and more may have been accessed
April 24, 2020
http://www.nintendolife.com/news/20...ve_been_hacked_personal_info_possibly_at_risk

This week, an increasing number of Nintendo account holders have been reporting suspicious activity on their accounts, sometimes including unauthorised logins and payments used to buy digital goods on Nintendo's digital stores. In response, Nintendo advised players to set up 2-Step Verification to add another layer of security to their accounts, and have now issued an official statement.

Posted to Nintendo's Japanese website, the statement confirms that around 160,000 Nintendo accounts which use a Nintendo Network ID to log in may have been affected by unauthorised logins. These hacking attempts have been taking place since around the beginning of April.
Nintendo says that it has now abolished the option to login using a Nintendo Network ID and will enforce password updates for any accounts which have either been directly affected, or use that login method.

Nintendo warns that information such as a player's nickname, date of birth, country / region, or email address may have been viewed by a third party if connected to a Nintendo Network ID. Players' credit card information remains safe and secure.
Click to expand...

guest · Jun 9, 2020

Nintendo says 140,000 more NNID accounts have been illegally accessed
But the breach isn't technically Nintendo's fault
June 9, 2020
https://www.engadget.com/nintendo-s...s-have-been-illegally-accessed-101241112.html

Nintendo shut down NNID logins back in April after it discovered hackers had compromised some 160,000 accounts using legacy credentials. Now, the company says that figure was more like 300,000. In a Japanese language statement posted today, Nintendo says that in continuing the investigation, it found “approximately 140,000 additional NNIDs that may have been accessed maliciously.”

It also clarified that the issue was not the result of a direct Nintendo breach, but rather customers using the same passwords in multiple places. Those compromised on other platforms were likely sold or harvested from the dark web.
Click to expand...

In today’s statement, Nintendo says that fewer than one percent of all NNIDs around the world were compromised, and while passwords for the additional 140,000 have been reset and their owners contacted, the company is “taking additional security measures.” It’s not specified exactly what these are, though.
But the conclusion that the issue stemmed largely from users’ repetitive password use is a teachable moment for everyone when it comes to practising good password hygiene.
Click to expand...

Log in or Sign up

Nintendo fans report spate of unauthorised account access attempts

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Nintendo fans report spate of unauthorised account access attempts

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches