Nintendo Switch's indispensable 'Nintendo account' has been followed by illegal login damage, Nintendo officially recommends enabling two-step verification
Nintendo
Nintendo accounts are getting hijacked—including one of ours | Ars Technica
https://arstechnica.com/gaming/2020/04/nintendo-accounts-are-getting-hijacked-including-one-of-ours/
Nintendo fans report spate of unauthorised account access attempts • Eurogamer.net
https://www.eurogamer.net/articles/2020-04-20-nintendo-fans-report-spate-of-unauthorised-access-attempts
Nintendo users urged to activate account security as third-party logins reported | VGC
https://www.videogameschronicle.com/news/nintendo-users-urged-to-activate-account-security-as-third-party-logins-reported/
The cause that many users noticed was the 'email notification' sent from Nintendo. If the Nintendo account is accessed from an environment different from the usual environment, an email with the subject 'Nintendo account: New login' will be sent to the email address you have set. This notification will show you the location of the device that signed in to the account and details of your browser so that you can determine if it is an unauthorized access.
Around the third week of April 2020, there were numerous reports on Reddit and Twitter that `` I noticed unauthorized access via email notification '', and it became clear that unauthorized access to Nintendo accounts is rapidly increasing. It was Among the users who were victims of unauthorized access, there were staff of game news site Eurogamer.net and editors of IT news site Ars Technica.
Nintendo has not revealed the cause of this unauthorized access, but Ars Technica pointed out that it may be either 'a login ID and password were leaked' or 'a method to log in to an account without a password was discovered'. One user reported on Twitter, 'I haven't reused my password and never logged in to my Nintendo account from my PC.' We denied the possibility that the password shared with other services was used for this unauthorized access and the password stored on the PC was leaked.
I suspect Nintendo may have had a major security breach. My account was accessed numerous times overnight.
— Pixelpar (@pixelpar) April 19, 2020
My password is a unique string and my PC is definitely clean (not that I ever login via it).
Lots of similar reports on Reddit / twitter.
Unlink PayPal & enable 2FA folks!
Eurogamer.net reported a case where a user who was linked to the Nintendo account with the online payment service PayPal account illegally purchased the in-game currency of ' Fort Knight '. Ars Technica pointed out that if you change the Nintendo eShop region to a certain region such as Brazil, a 'download code' will be distributed when you purchase the game. He pointed out that there is a way to send the game software purchased by unauthorized access to a third party by sending this download code.
Nintendo seemed to be aware that the number of unauthorized access is increasing, and on April 7, 2020, `` In April, 'I was illegally logged in to my Nintendo account and my credit card was used illegally'. We are increasing the number of inquiries. '
In April, the number of inquiries about 'I was illegally logged in to my Nintendo account and my credit card was illegally used' is increasing.
— Nintendo Support (@nintendo_cs) April 7, 2020
Two-step verification is effective as a countermeasure against unauthorized login. It is recommended to set it for safety.
Please see here for the setting method. https://t.co/ww4J3CkOae
Nintendo officially recommends 'two-step verification' as a means of preventing unauthorized access to your Nintendo account by entering a valid 'authentication code' for a certain period of time in addition to authenticating with a login ID and password when logging in. How to enable two-step verification on your Nintendo account is detailed below.
Two-step verification | Nintendo Account Support | Nintendo
https://www.nintendo.co.jp/support/nintendo_account/2fa/index.html
Related Posts: