450 Nintendo Network Accounts Have Had Their Passwords Leaked

Discussion in 'GBAtemp & Scene News' started by Chary, Jan 23, 2017.

  1. Chary
    OP

    Chary Never sleeps

    pip Reporter
    GBAtemp Patron
    Chary is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    4,353
    14,467
    Oct 2, 2012
    United States
    155px-Nintendo_Network_Logo.png

    It might be time to update your passwords for Nintendo's online service, as nearly 450 accounts have been hacked, and their passwords leaked. You can view the Pastebin full of usernames linked below to check and see if your account was compromised. Even if you're not listed, it still might be a wise idea to change your password, just to be on the safe side.

    :arrow: SOURCE
     


  2. Ev1l0rd

    Ev1l0rd (⌐◥▶◀◤) Knight of Void

    Member
    1,031
    754
    Oct 26, 2015
    Netherlands
    Land of Darkness and Bounty
    Oof. None of my accounts are on that pastebin, thank goodness. Would probably have a major freakout if it were.
     
  3. SpongeFreak52

    SpongeFreak52 GBAtemp Fan

    Member
    405
    213
    Apr 8, 2007
    United States
    C:\WINDOWS\system32\cmd.exe
    Last edited by SpongeFreak52, Jan 23, 2017
    dimmidice likes this.
  4. Chary
    OP

    Chary Never sleeps

    pip Reporter
    GBAtemp Patron
    Chary is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    4,353
    14,467
    Oct 2, 2012
    United States
    Have I been pwned, a site that can check massive data breaches.
     
    hobbledehoy899 likes this.
  5. Mikemk

    Mikemk GBAtemp Advanced Maniac

    Member
    1,557
    555
    Mar 26, 2015
    United States
    I'd change my password, but for some reason none of Nintendo's websites have DNS addresses right now.
    This occuring for anyone else or just me?
     
  6. RustInPeace

    RustInPeace Samurai Cop

    Member
    2,861
    2,183
    Oct 13, 2014
    United States
    Has anyone been trying to change their passwords? I got it done in one console, but now I keep hitting a 022-5548 warning.
     
  7. KapuDaKoopa
    This message by KapuDaKoopa has been removed from public view by raulpica, Jan 25, 2017, Reason: Congrats, you're a prick -rp.
    Jan 23, 2017
  8. RupeeClock

    RupeeClock Colors 3D Snivy!

    Member
    6,389
    861
    May 15, 2008
    It apparently wasn't a breach, just somebody posting a list of NNIDs they successfully compromised due to other sites or services that were compromised.
    It's little more than an example of the importance of changing your passwords and not using them throughout the same sites.
     
  9. UnobtaniumGamer
    This message by UnobtaniumGamer has been removed from public view by raulpica, Jan 25, 2017, Reason: Reply to trashed post -rp.
    Jan 23, 2017
  10. Fishaman P

    Fishaman P Speedrunner

    Member
    3,241
    507
    Jan 2, 2010
    United States
    Wisconsin
    Sounds like these were phished from the users by other means.
    I don't think Nintendo's servers were breached at all.
     
  11. Starfighter-Suicune

    Starfighter-Suicune Member

    Newcomer
    23
    2
    Dec 19, 2016
    Germany
    The fact alone that he just had to bruteforce them doesn't make Nintendo safer than skype...
    If you never posted your nnid on a page or posted in miiverse, you should be safe since he got the nicknames from somewhere.
     
    Last edited by Starfighter-Suicune, Jan 23, 2017
  12. enarky

    enarky owls?

    Member
    GBAtemp Patron
    enarky is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    1,048
    247
    Jul 31, 2003
    Afghanistan
    Yepp. With only 450 accounts involved I wouldn't call this a "data breach". More likely the result of bad password management. Probably should change the wording of this post, sounds a bit hyperbolic.
     
  13. fvig2001

    fvig2001 Advanced Member

    Newcomer
    72
    11
    Aug 21, 2006
    Someone on /r/3dshacks claimed that he brute forced known passwords and that's how he got the 440 names. Then his friend leaked what he found.
     
  14. Apache Thunder

    Apache Thunder I have cameras in your head!

    Member
    4,102
    4,034
    Oct 7, 2007
    United States
    Levelland, Texas
    450 accounts?.... That's it? I'd hardly consider that a breach given the scale of the service involved. There has to be millions of accounts on Nintendo's servers. You'd nearly have the same odds of winning a state lottery then finding out your on that list of hacked accounts.... :P
     
  15. Soulsilve2010

    Soulsilve2010 GBAtemp Regular

    Member
    282
    60
    Sep 3, 2016
    United States
    United States,Indiana
    I wasn't hacked,got no eshop money to be stolen anyway.Still will change my password to protect my miiverse account.
     
    KiiWii likes this.
  16. tech3475

    tech3475 GBAtemp Advanced Fan

    Member
    657
    287
    Jun 12, 2009
    Again, Id advise people to use a password manager of some kind with a random password generator.

    If these were brute forced, a good password gen will create a combo which will make it allot harder and each site having its own password reduces the chance of cross site hacking.
     
  17. Xiphiidae

    Xiphiidae ξίφος εἶδος

    Member
    2,080
    1,016
    Sep 13, 2009
    Australia
    Even those are not guaranteed safe. What's most important is people using different passwords for different sites, and using 2FA whenever possible.
     
  18. Chary
    OP

    Chary Never sleeps

    pip Reporter
    GBAtemp Patron
    Chary is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    4,353
    14,467
    Oct 2, 2012
    United States
    Sources I was looking at were claiming this as a data breach. I'll amend the title, but I certainly think this is still worth bringing attention to, seeing as there's been a lot of users getting screwed over lately because they use the same password with every site they sign up for.
     
    Xiphiidae likes this.
  19. enarky

    enarky owls?

    Member
    GBAtemp Patron
    enarky is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    1,048
    247
    Jul 31, 2003
    Afghanistan
    Word on Reddit is that this is coming from the Nugget Bridge leak a couple of weeks ago. People used the same passwords on Nintendo Network.
     
  20. tech3475

    tech3475 GBAtemp Advanced Fan

    Member
    657
    287
    Jun 12, 2009
    Forgot about 2FA (although even that can be hacked like with boogie2988), but the reason why I say to use a password manager is to avoid repeating passwords, otherwise there wouldnt be much point and I doubt people would use unique password otherwise unless you have only a handful of accounts.
     
  21. Scarlet

    Scarlet Scarlet Sword

    Member
    GBAtemp Patron
    Scarlet is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    1,826
    1,963
    Jan 7, 2015
    United Kingdom
    Middleish North-Left
    This is probably the case. I recognise a few of them and a LOT of them have VGC in the name. Either the leaker has a vendetta against Pokémon fans or it's just an extension of the whole Nugget Bridge fiasco. Or both.
     
  22. Bladexdsl

    Bladexdsl ZOMG my posts...it's over 9000!!!

    Member
    16,218
    3,859
    Nov 17, 2008
    Australia
    Queensland
    yeah who cares i don't go online on the wiiu anymore and sold my 3ds :P
    SPOILS!