Connect with us

News

‘Unauthorised access to some Nintendo Accounts’ more widespread than it first appeared

In a post on its support site, Nintendo admits that “unauthorised access to some Nintendo Accounts” has occurred, but insists that no Nintendo servers or databases were breached.

Published

on

Nintendo Accounts breach 2020
Nintendo

In a post on its support site, Nintendo admits that “unauthorised access to some Nintendo Accounts” has occurred, but insists that no Nintendo servers or databases were breached.

The first rule of an information security breach is that you tell everyone who has been impacted as early as possible.

And this isn’t some “first rule of Fight Club” stuff. These are the rules laid out by numerous regulatory bodies around the world. But for the sake of being specific to the jurisdiction in which Thumbsticks finds itself, we’ll refer to GDPR (General Data Protection Regulations) and the ICO (that’s the Information Commissioner’s Office, the regulatory body that polices such things) and their guidelines on reporting breaches.

  • The GDPR introduces a duty on all organisations to report certain types of personal data breach to the relevant supervisory authority. You must do this within 72 hours of becoming aware of the breach, where feasible.
  • If the breach is likely to result in a high risk of adversely affecting individuals’ rights and freedoms, you must also inform those individuals without undue delay.

So in a circumstance where user accounts or data have been breached, then the organisation must report it to the ICO within 72 hours, and must report it to individuals potentially impacted – in this case, “rights and freedoms” relates to personal data and the potential for financial loss – without any “undue delay”.

Given that people have (anecdotally) been complaining of breaches to their Nintendo Accounts for a couple of weeks now, including unauthorised purchases that haven’t been refunded, that’s not looking very good for Nintendo. The developer and publisher has only today (April 24, 2020) issued a statement about the “unauthorised access to some Nintendo Accounts,” which reads as follows:

We would like to provide an update on the recent incidents of unauthorised access to some Nintendo Accounts.

While we continue to investigate, we would like to reassure users that there is currently no evidence pointing towards a breach of Nintendo’s databases, servers or services. As one action in our ongoing investigation, we are discontinuing the ability to use a Nintendo Network ID to sign in to a Nintendo Account. All other options to sign-in to a Nintendo Account remain available.

As a further precaution, we will soon contact users about resetting passwords for Nintendo Network IDs and Nintendo Accounts that we have reason to believe were accessed without authorisation.

In addition, we also continue to strongly encourage users to enable two-step verification for their Nintendo Account as instructed here: How to set-up two-step verification for a Nintendo Account.

If any users become aware of unauthorised activity, we encourage them to take the steps outlined in the article about the Nintendo Account recovery process.

During the investigation, in order to deter further attempts of unauthorised sign-ins, we will not reveal more information about the methods employed to gain unauthorised access.

We apologise for the inconvenience and concerns caused to our customers, and we will continue working hard to safeguard the security of our users’ data.

The good news is, there doesn’t appear to have been a breach of any of Nintendo’s core systems – including databases and servers containing personal and financial details – which, you may recall, is what happened to Sony’s PlayStation Network in 2011.

Advertisement – Support Thumbsticks on Patreon to disable ads

The bad news is that, while Nintendo hasn’t made details of the exploit public for obvious reasons, the attack vector will have been fairly large. This is because the unauthorised logins made use of the legacy Nintendo Network ID associated with users accounts, and basically everyone who signed up for a Nintendo account on the Wii U or Nintendo 3DS will have one.

To mitigate the vulnerability, Nintendo is disabling the ability to login with a Nintendo Network ID. But the real solution, the one that all users should do, is to enable multi-factor authentication (which Nintendo refers to as two-step verification) on their Nintendo account. This means you’ll have to use a code generated from your smartphone (using the Google Authenticator app) to login. This means your password on its own is effectively worthless, unless you also have in your possession the linked mobile phone to generate the authorisation codes.

Real talk, folks: you should enable multi-factor authentication on any service that supports it. If you wait until a breach comes around, like this one, you might find it’s already too late.

Update: June 9, 2020

In a post on its Japanese support site – originally reported by IGN – Nintendo has confirmed that another 140,000 accounts have been compromised. That’s an additional 140,000 accounts on top of the original 160,000 accounts, making it a total of 300,000 accounts.

The Nintendo article states that the following information might have been visible to an attacker: “Nickname, date of birth, country/region, email address”. It’s also quick to remind users that the breach represents less than 1% of Nintendo Accounts worldwide.

This is a timely reminder that you should always use multi-factor authentication on your accounts. Even if a service provider says that a vulnerability has been fixed. Especially if a service provider says that a vulnerability has been fixed.


For all the important video game news stories (and information security advice, when appropriate) follow Thumbsticks on FacebookGoogle NewsTwitter, and Flipboard.

Enjoyed this article?

Found it interesting, entertaining, useful, or informative? Maybe it even saved you some money. That's great to hear! Sadly, independent publishing is struggling worse than ever, and Thumbsticks is no exception. So please, if you can afford to, consider supporting us via Patreon or buying us a coffee.


Recommended for you


Tom is an itinerant freelance technology writer who found a home as an Editor with Thumbsticks. Powered by coffee, RPGs, and local co-op.

News

Earn Double Gold Points on the Nintendo eShop for the next month

A new Nintendo eShop promotion gives players Double Gold points for buying Nintendo Switch games.

Published

on

Nintendo eShop Double Gold Points Fest
Nintendo / Thumbsticks

A new Nintendo eShop promotion rewards players with Double Gold points for buying Switch games.

The Nintendo eShop Double Gold Points Fest has launched in today in Europe. During the promotion, selected games give customers double the usual amount of My Nintendo Gold Points on selected games. In some cases, this is the equivalent of getting up to 10% of your money back, albeit in Nintendo’s digital currency.

The first games to be included are Square Enix’s masterful JPG, Dragon Quest XI, the brilliant Snipperclips – Cut it out, together!, and puzzle adventure, Layton’s Mystery Journey: Katrielle and the Millionaires’ Conspiracy.

Three new games will be added to the promotion every Thursday until July 30, 2020. We’re not sure if the promotion is coming to North America but update this page if we get confirmation.

Nintendo eShop Double Gold Points Fest – Week 1

  • Snipperclips – Cut it out, together! – 200 EU / 180 UK
  • Dragon Quest XI S: Echoes of an Elusive Age – Definitive Edition – 600 EU / 500 UK
  • Layton’s Mystery Journey: Katrielle and the Millionaires’ Conspiracy – Deluxe Edition – 400 EU / 350 UK

And what can you do with Gold Points? Well, they can be redeemed against future game purchases on the Nintendo eShop. Recent titles we’ve enjoyed include Star Wars Episode 1: Racer and The Eternal Castle.

They can also be exchanged via the My Nintendo website for Nintendo 3DS game discounts and digital themes. Read our roundup of the latest rewards to see what’s on offer.

If we’re honest, we’d rather a nice big eShop sale. But if you were thinking of picking up one of the included games, the Gold Points Fest is a nice bonus.


More from Thumbsticks

Check out the Thumbsticks new releases page for weekly Nintendo Switch, Xbox One, and PlayStation 4 updates. You can also follow us on Facebook, Google News, Twitter, and Flipboard.

Enjoyed this article?

Found it interesting, entertaining, useful, or informative? Maybe it even saved you some money. That's great to hear! Sadly, independent publishing is struggling worse than ever, and Thumbsticks is no exception. So please, if you can afford to, consider supporting us via Patreon or buying us a coffee.


Recommended for you


Continue Reading

News

The Sims 4 is free to play on Xbox One this weekend

The latest Xbox One Free Play Days promotion features two new games, including The Sims 4. Trust us, you’ll need more than a weekend.

Published

on

Xbox One - The Sims 4
Microsoft / EA / Thumbsticks

The latest Xbox One Free Play Days promotion features two new games, including The Sims 4. Trust us, you’ll need more than a weekend.

The Sims 4 is a big game, a fun game, and, for its keenest players, almost a way of life. Speaking as someone who has put over 200 hours into Animal Crossing: New Horizons without even thinking about it, there is something both comforting and compelling about life simulation games. If you like experiences where the most mundane of tasks gives as much pleasure as saving the universe, The Sims 4 is worth a look.

The Sims 4 is now free to play on Xbox One until Sunday, July 12 at 11:59 pm. That’s just enough time to scratch the surface of the game and see if grabs you. There’s a 75% discount on the standard edition to tempt you into a full purchase. There are also savings to be had on many of the game’s expansions and content packs. Just make sure you have plenty of free time in the calendar.

Online sandbox RPG Citadel Forged is also free to play for the next four days. Again, it’s probably just enough time to see if you click with the game’s loop of heroic activities and busywork.

Save progress and achievements in both titles are carried over to the purchased copies.

Xbox Free Play Days Discounts

Citadel Forged

  • Standard Edition – 60% off

The Sims 4

  • Standard Edition – 75% off
  • Deluxe Party Edition – 75% off
  • Dogs & Cats Bundle – 50% off
  • City Living Pack – 50% off
  • Dine Out Pack – 50% off
  • Discover University Pack – 50% off
  • Get Famous Pack – 50% off
  • Get to Work Pack – 50% off
  • Pack Bundle – 50% off
  • Get Together Pack – 50% off
  • Island Living Pack – 50% off
  • Jungle Adventure Pack – 25% off
  • Outdoor Retreat Pack – 25% off
  • Parenthood Pack – 25% off
  • Realm of Magic Pack – 25% off
  • Seasons Pack – 25% off
  • Spa Day Pack – 25% off
  • StrangerVille Pack – 25% off
  • Vampires Pack – 25% off

For more Xbox One games, you can grab savings of up to 90% in this this week’s four new sales.


Visit the Thumbsticks sales page for more video game deals, and our new releases section for the latest PS4, Xbox One and Nintendo Switch games. You can also follow us on Twitter and Facebook.

Enjoyed this article?

Found it interesting, entertaining, useful, or informative? Maybe it even saved you some money. That's great to hear! Sadly, independent publishing is struggling worse than ever, and Thumbsticks is no exception. So please, if you can afford to, consider supporting us via Patreon or buying us a coffee.


Recommended for you


Continue Reading

News

You can buy Ellie’s Taylor 314ce guitar from The Last of Us Part II

The gorgeous, limited-edition The Last of Us Part II Taylor 314ce costs $2,299 and is available to pre-order now.

Published

on

Limited Edition The Last of Us Part II Taylor 314ce
Taylor / Sony

The gorgeous, limited-edition The Last of Us Part II Taylor 314ce costs $2,299 and is available to pre-order now.

For a game about revenge, the gentler pursuit of playing guitar is surprisingly prominent. From singing songs to your girlfriend with a guitar found in an abandoned music store to chilling out after a stressful day in your theatre base, Ellie will play the guitar any chance she gets.

But it’s the guitar she receives as a gift from Joel in the game’s prologue that is the most meaningful, for obvious reasons.

We first see Joel, finding the guitar while out on a run with his brother, Tommy. He sits, cleaning up the fretboard, while confessing to Tommy the events of the first game and of Salt Lake City. And it’s a lucky find, too: a tobacco burst Taylor 314ce, with a unique moth inlay and faux tortoiseshell pickguard. For the world to end and then, over 20 years later, find a two grand Taylor guitar among the rack and ruin, in good enough condition to restore and play? What are the chances?

Now the chances of you owning one for yourself has improved, as Taylor has worked with Sony and Naughty Dog to produce a limited-edition Taylor 314ce. It’s a one-to-one reproduction of Ellie’s guitar in-game and it’s a Taylor so, you know, it’s going to be an incredible instrument.

You can pre-order The Last of Us Part II Taylor 314ce from Sony right now, with orders open until the end of July and the guitars due to ship from late August. These won’t be available from Taylor or in music stores, however, nor will they be available outside of North America. Sony only plans to ship them to the USA, Canada and Mexico.

The Last of Us Part II Taylor 314ce costs $2,299, which might sound like a lot, but it’s only $300 more than the regular Taylor 314ce. We don’t know how limited edition the guitars will be, for that matter, but if you were already planning on dropping two grand on a beautiful Taylor acoustic guitar? Then you might feel comfortable scraping together the extra to make it a limited edition.

I’d like to pretend I’m not upset that I can’t get one of these in the UK. But I am. I am upset, Sony.


Read more about The Last of Us Part II – including a range of features and guides – right here on Thumbsticks.

Enjoyed this article?

Found it interesting, entertaining, useful, or informative? Maybe it even saved you some money. That's great to hear! Sadly, independent publishing is struggling worse than ever, and Thumbsticks is no exception. So please, if you can afford to, consider supporting us via Patreon or buying us a coffee.


Recommended for you


Continue Reading

News

Save up to 70% in the PlayStation Store July Sale

Some massive PlayStation 4 games are on offer in the new PlayStation Store July sale.

Published

on

PlayStation Store sale - God of War
Sony / Thumbsticks

Some massive PlayStation 4 games are discounted in the new PlayStation Store July sale.

A brand new PlayStation Store sale starts today that slashes the price of some top PS4 titles. An impressive selection of PlayStation exclusives are included, headlined by the mighty God of War. The 2018 game is both action-packed and emotional, and a stunning reinvention for Sony’s long-running franchise.

Other discounted exclusives include Marvel’s Spider-Man, Horizon Zero Dawn: The Frozen Wilds, MediEvil, and the oft-overlooked Concrete Genie.

Other titles to get big price cuts include Dark Souls III, the excellent remaster of Assassin’s Creed III, Generation Zero, and the inventive apis mellifera adventure, Bee Simulator.

Visit the PlayStation Store for the full lineup of games in your country. Here are some more picks from your dedicated team of, erm, gaming expects here at Thumbsticks. The sale ends on July 22, 2020.

PlayStation Store July Sale Highlights

  • AO Tennis 2
  • Arca’s Path VR
  • Assassin’s Creed III Remastered
  • Assassin’s Creed Odyssey
  • Bee Simulator
  • Call of Duty: Advanced Warfare
  • Code Vein
  • Concrete Genie
  • Crash Bandicoot Bundle – N. Sane Trilogy + CTR Nitro-Fueled
  • Dark Souls III
  • Devil May Cry 5
  • Dragon Ball Z: Kakarot
  • Fist of the North Star: Lost Paradise
  • FlatOut 4: Total Insanity
  • For Honor Complete Edition
  • Generation Zero
  • Ghost Recon Breakpoint
  • God of War
  • Horizon Zero Dawn: The Frozen Wilds
  • Journey
  • Marvel’s Spider-Man
  • MediEvil
  • Ni no Kuni: Wrath of the White Witch Remastered
  • No Man’s Sky
  • Resident Evil 7 biohazard
  • Star Wars Jedi: Fallen Order
  • Strange Brigade
  • Watch Dogs 2 – Deluxe Edition
  • WRC 5 eSports Edition

Bookmark the Thumbsticks deals page to get updates on the latest PlayStation 4, Xbox One, and Nintendo Switch savings. You can also follow us on FlipboardFacebookGoogle News, and Twitter.

Enjoyed this article?

Found it interesting, entertaining, useful, or informative? Maybe it even saved you some money. That's great to hear! Sadly, independent publishing is struggling worse than ever, and Thumbsticks is no exception. So please, if you can afford to, consider supporting us via Patreon or buying us a coffee.


Recommended for you


Continue Reading

News

PES 2021 loses the rights to two big football teams

Konami has confirmed that the eFootball PES series no longer holds the official rights to two Italian football teams.

Published

on

eFootball PES 2020 keyart
Konami

Konami has confirmed that the eFootball PES series no longer holds the official rights to two famous Italian football teams.

The Japanese publisher has issued two – rather curt – statements related to Italian Serie A teams AC Milan and Inter Milan, saying:

“Thank you for playing eFootball PES 2020 and your continued support. Our licensing contract with AC Milan/Inter Milan will not be renewed. The representation of the Club will not be affected in eFootball PES 2020.”

The statement confirms that both clubs will remain in the franchise’s most recent entry, eFootball PES 2020. Footballers used in the game’s myClub mode are also unaffected rights loss.

The news comes following a string of high-profile licence acquisitions by the series. In recent year, popular teams including Arsenal, Bayern Munich, and Juventus have all inked partnerships with Konami.

The series also acquired the eFootball prefix in an attempt to align it with the growing eSports scene. We still call it PES, though. My gran still calls it PES. My gran’s dog still calls it PES.

The official announcement of eFootball PES 2021, including its release date and official team lineup, is expected within the next month.


More video game news from Thumbsticks

Follow us on FlipboardFacebookGoogle News, and Twitter for more video game news.

Enjoyed this article?

Found it interesting, entertaining, useful, or informative? Maybe it even saved you some money. That's great to hear! Sadly, independent publishing is struggling worse than ever, and Thumbsticks is no exception. So please, if you can afford to, consider supporting us via Patreon or buying us a coffee.


Recommended for you


Continue Reading