Nintendo resets another 140,000 passwords after unauthorized logins

Nintendo has reset the passwords of an additional 140,000 accounts with a Nintendo Network ID. These are accounts from which the company discovered unauthorized logins. Nintendo previously reset 160,000 accounts. According to the company, it is not a data breach.

Nintendo writes on a Japanese support page that it has reached out to 140,000 affected users about the incident. It concerns unauthorized logins with a Nintendo Network ID. The users have been logged out and their passwords have been reset. Nintendo Network IDs are different from Nintendo Accounts. The identification method was used on Nintendo 3DS and Wii U.

It is the same incident as in April. Back then, Nintendo already reset 160,000 user accounts after unauthorized logins were detected. Nintendo says it has conducted further investigations and concluded that there are nearly twice as many victims.

It is still not clear how the logins could have happened. According to Nintendo, no credential stuffing was used, but the company has not said anything about a possible intrusion on the company’s servers. The accounts logged into the attackers could see the victim’s username, date of birth, country, and email address.