Nintendo data leak

The Nintendo data leak, also known as the Nintendo Gigaleak, is a series of leaks of data from the Japanese video game company Nintendo on the anonymous imageboard website 4chan. The leak started in March 2018, but became most prominent in 2020.^[2] Ten main sets of data leaked on 4chan, ranging from game and console source code to internal documentation and development tools. The name "Gigaleak" mainly refers to the second leak on July 24, 2020, which was 3 gigabytes in size. The leaks are believed to have come from companies contracted by Nintendo in the design of these consoles,^[3] and/or from individuals previously convicted of intrusion into Nintendo systems.^[4][5][6] An earlier, much smaller leak had also occurred in 2018 which contained the Nintendo Space World 1997 demos for Pokémon Gold and Silver.^[7]

Nintendo data leak

Date	March 2018–present Public release: May 31, 2018 – present^[1]
Also known as	Nintendo Gigaleak
Type	Data breach
Target	Nintendo Co., Ltd.
Suspects	Zammis Clark

The leaks are infamous for the sheer size and the amount of internal material leaked; video game journalists have described the magnitude of the leaks as unprecedented, and suggested that they might have significant effects for emulation and to preservationists, in addition to the legal questions posed by the leak. In June 2022, Nintendo acknowledged the leaks whilst assuring an increase to their overall security.

Background

Further information: Nintendo

Nintendo is a Japanese video game developer and publisher that produces both software and hardware.^[8] Its hardware products include the handheld Game Boy and Nintendo DS families and home consoles such as the Nintendo Entertainment System (NES), Super NES, Nintendo 64 (N64), GameCube, and Wii. Software Nintendo produces includes popular franchises such as Mario, The Legend of Zelda, and Pokémon.^[9] Ethan Gach of Kotaku described Nintendo as "notoriously secretive" about development.^[8]

Nintendo is aggressive in ensuring its intellectual property in both hardware and software is protected.^[10][11] In a notable case, Nintendo, with the assistance of the US Federal Bureau of Investigation, sought enforcement action against Ryan Hernandez, an American hacker who infiltrated Nintendo's internal database to leak plans of what games and hardware Nintendo planned to announce for upcoming shows like the Electronic Entertainment Expo. In January 2020, Hernandez pled guilty to stealing the information from Nintendo.^[12]

Leaks

Beginning in March 2018, information began to spread about a trove of stolen data from Nintendo's servers being leaked by hackers via the anonymous imageboard website 4chan.^[5][6] The leaks began with smaller releases, such as iQue Player ROMs and early Pokémon designs. The leaks began to gain significant traction in early May 2020, when source code for Nintendo's consoles appeared online. Because the leaked material included specifications related to the Wii, the company BroadOn, which Nintendo had contracted to help design the console, was identified as one potential source of the leaks.^[3] Another possible source was Zammis Clark, a British Malwarebytes employee and hacker who in 2019 pleaded guilty to hacking charges and received a suspended sentence of 15 months for infiltrating Microsoft and Nintendo's servers between March and May 2018.^[13][5][6] According to reporting by journalist Jeremy Kirk of Bank Info Security, Clark sent the data he stole to several of his acquaintances, who subsequently began leaking the information on 4chan. According to Kirk, Nintendo likely knew the material would eventually be leaked.^[5] Further evidence to support the source being Clark can be found in the file modification dates of some released files, dated to March and May 2018, the same timeframe Clark allegedly had access.

In late July 2020, a second set of leaked data several gigabytes in size was released. Journalists and Nintendo fans dubbed this leak the "Gigaleak".^[14] The leak comprised information about the Super Nintendo Entertainment System and Nintendo 64 consoles and their games,^[15] including prototypes and data related to Star Fox and Star Fox 2, whose veracity was confirmed by Nintendo programmer Dylan Cuthbert.^[16][17] The leak also contained personal files of the developers, leading to concerns about privacy depending on how the information was shared.^[15] Hacktivist maia arson crimew was credited for the leak by Bleeping Computer, but told Tom's Guide that said leak did not originate with it.^[18]

In the first week of September 2020, a third, smaller set of information was leaked on 4chan. The leaks consisted of documents for two unreleased GameCube models. The first model appeared to be a hybrid console version of the GameCube similar to the Nintendo Switch, fitted with a built-in display and able to connect to a TV via a docking station.^[19][20] A backup of the Wii's hardware repository (codenamed "Tako", later "Vegas" by ATi), dated May 23, 2006, was also leaked. This repository contained a block diagram for a portable version of the Wii, Verilog files for near-final versions of the Wii components, and a 2003 ATI proposal for a console that would natively render games at HD video resolutions similar to the Xbox 360 and PlayStation 3, include slots for both SD and memory cards, which was tentatively scheduled for a Christmas 2005 release.^[21] This data set also contained a disc image of the previously lost Wii Startup Disc, a disc shipped with early Wii units to install the firmware.^[22]

A fourth set of information was leaked in 4chan on the second week of September 2020 (dubbed as "Gigaleak 3"). This set contains the internal documents for Wii Sports and Wii Sports Resort, source code to the Nintendo DSi boot ROM and some DSi apps, and a Game Boy and Game Boy Color ROM lot^[23] which contains released and unreleased games for the Game Boy and Game Boy Color along with their prototype and unreleased localized versions. One such game is the cancelled Pokémon Picross for Game Boy Color which, prior to the leak, was only previously seen in Japanese gaming magazines in 1999.

A fifth set of information was leaked in 4chan on September 30, 2020. This set contains the debug and demo ROMs for Pokémon Ranger, Pokémon Mystery Dungeon: Blue Rescue Team and Red Rescue Team and Pokémon FireRed and LeafGreen, internal tools for the Nintendo 3DS, and a Famicom Disk System ROM lot containing released and unreleased games. One of which was a unreleased port of Balloon Fight for the Famicom Disk System which had never been officially announced by Nintendo during the Famicom Disk System's lifespan.^[24]

Multiple sets were leaked in October 2020. The sixth set of information was leaked on October 17, 2020, containing the Git repository for Pokémon Sun and Moon and its updated rereleases, previously unseen Wii software used by Nintendo during manufacturing and repair, multiple versions of the Wii's internal operating system, as well as a pre-release version of the Wii system menu. The seventh set of information was leaked on October 21, 2020, containing two password-protected zip files later found to contain two debug builds of Pokémon Sword dated March 2018 and December 2017, respectively. The builds appear to have been based on Pokémon: Let's Go, Pikachu! and Let's Go, Eevee!, with related assets found within the builds. The eighth set of information was leaked on October 22, 2020, containing another two split password-protected zip files which they were later found to be a May 2018 debug build of Pokémon Sword.

A ninth set of data was leaked in December 2020, which was primarily focused on early prototype designs of the Nintendo Switch and a prerelease SDK for the unit. Although the Nintendo Switch name had been finalized by 2014, this early design was closer in power to the 3DS, had a circular display, and connected to televisions through a wireless connection as opposed to a docking station. The leak also contained information on Nintendo's surveillance of and attempts to hire one Belgian hacker who was active in the 3DS homebrew scene.^[25] Alongside this, the source code for the Switch boot ROM was leaked, including both hardware revisions.

A tenth set of data was leaked in July 2021, containing source code for the Wii Service program, debug and prototype builds of Pokémon X and Y, Pokémon Emerald, Pokémon Diamond and Pearl, Pokémon: Let's Go Eevee!,^[26] the full development repository for the cancelled iQue Box (a GameCube-based successor to the iQue and related GameCube files), a personal email backup from a manager of Nintendo SPD from 2002 to 2006, and documents for systems like the Wii and the Nintendo Switch's Game Card reader,^[27] including early designs of the Wii Remote.^[28] Early images featuring enemies, bosses, NPCs, power-ups, and objects in New Super Mario Bros. were also leaked. These early screenshots include an early Bob-omb that is looking at Mario, and a Balloon Boo with a different mouth.

Data

 

The leaks included source code related to a number of Nintendo consoles, such as the Wii (pictured).

The leaked data is estimated to be over two terabytes,^[29] though only three gigabytes had been released as of May 4, 2020.^[8] The oldest material dates to the late 1980s.^[5] The leaks include (but are not limited to):

• Source code related to the N64, GameCube, and Wii consoles.^[29]
• Development repositories for the Game Boy Color Boot ROM and Game Boy Advance BIOS.^[30]
• N64 tech demos that test the system's hardware.^[8]
• A development repository for the canceled NetCard peripheral for the Game Boy Advance.^[30]
• Debugging material, prototypes, source code, and early designs for the Pokémon video games, dating back to the Game Boy installments.^[31][32]
• A concept for an online MMO Pokémon game, proposed by iQue and based on FireRed and LeafGreen.^[33]
• An official Game Boy emulator.
• A development repository for the "Ensata" Nintendo DS emulator.^[30]
• Raw graphics to many SNES and Game Boy games.
• Unreleased games for the NES, Famicom Disk System, Game Boy, and Game Boy Color.

Games with source code or assets leaked

Super NES

• BS Zelda no Densetsu
• F-Zero
• The Legend of Zelda: A Link to the Past
• Pilotwings
• SimCity
• Star Fox
• Star Fox 2
• Super Mario All-Stars
• Super Mario Kart
• Super Mario World
• Stunt Race FX
• Yoshi's Cookie
• Yoshi's Island
• Yoshi's Safari

Nintendo 64

• 1080° Snowboarding
• Animal Crossing
• Dr. Mario 64
• F-Zero X
• NBA Courtside 2: Featuring Kobe Bryant
• The Legend of Zelda: Ocarina of Time
• The Legend of Zelda: Majora's Mask
• Mario Kart 64
• Star Fox 64
• Super Mario 64
• Wave Race 64
• Yoshi's Story

Game Boy and Game Boy Color

• Pokémon Red and Blue
• Pokémon Yellow
• Pokémon Gold and Silver
• Pokémon Crystal
• The Legend of Zelda: Link's Awakening DX

Game Boy Advance

• F-Zero: Maximum Velocity
• Pokémon FireRed and LeafGreen
• Pokémon Ruby and Sapphire
• Pokémon Emerald
• Super Mario Advance
• Wario Land 4

Nintendo DS

• New Super Mario Bros.
• Pokémon Diamond and Pearl
• Pokémon Platinum

Nintendo 3DS

• Pokémon Sun and Moon
• Pokémon Ultra Sun and Ultra Moon
• Pokémon X and Y

System firmware

• Nintendo 64
• Game Boy Color
• GameCube
• iQue Box (cancelled)
• Game Boy Advance
• iQue Player
• iQue NetCard (cancelled)
• Nintendo DS
• Wii
• Nintendo DSi
• Nintendo 3DS
• Wii U
• Nintendo Switch

Prototypes and development materials

In addition to source code, the July 2020 leak included a number of video game prototypes, as well as cut content. A prototype of Yoshi's Island that does not feature Yoshi as the protagonist was uncovered; its title, Super Donkey, suggests it may have been considered as a new Donkey Kong game before being repurposed for Yoshi.^[34][35] Early sprites from various games, including Pilotwings when it was known as Dragonfly, were also discovered.^[34][36]

Among the most notable revelations was the discovery of an official 3D model of Luigi for Super Mario 64, corroborating developer interviewers at the time of the game's release that they had intended to include Luigi as a second co-operative character but had to cut this feature.^[34][37] Another major discovery was level maps intended for an unreleased 64DD expansion pack for The Legend of Zelda: Ocarina of Time.^[38] These various Zelda assets were assembled by fans to recreate a dungeon that was originally only viewable in pre-release screenshots.^[39]

The leaks included the software that was necessary to run the Workboy, a canceled Game Boy accessory that would have added personal digital assistant features to the handheld. Only two prototypes of the Workboy were known to exist, and the software from the leak was used to verify the operation of one of the Workboys.^[40] In 2021, fans used the Super Mario Advance source code to track down the samples used to compose Super Mario World's soundtrack and recreated the music as it would have sounded before being compressed to fit the SNES's limitations.^[41]

Commentary

Video game journalists noted the magnitude of the leaks and labeled them significant and unprecedented.^{[8][29][31][32]} Journalist Alex Donaldson described the leak as "of biblical, rarely heard of proportions",^[5] while Lucas White of Siliconera wrote that the leak "could be one of the biggest leaks in the medium's history."^[32]

Because the source code of various Nintendo consoles was leaked, journalists have noted the various after-effects the leak might have. Gach wrote that the leaked information "would be of great interest to emulation enthusiasts, data miners, and anyone curious about" Nintendo's history.^[8] The information could be used to enhance the accuracy of Nintendo console emulators or create clone systems that function identically to the original hardware. Such actions, however, would be illegal, and developers who commit them could face prosecution from Nintendo.^[8][29] For instance, the developers of Dolphin, a GameCube and Wii emulator, stated that using any of the leaked source code would lead to the Dolphin project's immediate shutdown.^[42] Nonetheless, the financial effects of the leak on Nintendo are expected to be minimal, as the leaked material is over a decade old.^[6]

White and Sam Chandler of Shacknews suggested that the leaks would be important for video game preservation efforts.^[32][43] Some preservationists that have looked at the data commented on the meticulous nature that Nintendo used to save its past work, an effort that they wished other video game companies used similar methods as it would greatly assist preservation efforts. However, these preservationists raised moral and ethical questions if they could use the data from the 2020 leaks in a legal manner without knowing their source and legitimacy. Andrew Webster of The Verge found this situation similar to the 2014 Sony Pictures hack, in which "all kinds of salacious internal details" about Sony Pictures were illegally released.^[44]

During an annual shareholder meeting in June 2022, Nintendo was asked about the leaks as well as Chinese video game company iQue relating to rumours they had been a source for the information leaks. In response, Nintendo President Shuntaro Furukawa reassured that they were working with experts to deal with information leaks by stating they had "introduced information security management", as well as acknowledging the company would continue to advance into the Chinese market with help from Tencent.^[45] Following the meeting, Nintendo published a statement further addressing their security and further detailed information security management.^[46][47]

See also

• List of commercial video games with available source code
• Pokémon Gold and Silver leak
• Windows XP Service Pack 1 source code leak
• Windows Server 2003 source code leak

References

1. "/vp/ – Pokémon » Thread #43255621". archive.nyafuu.org. from the original on July 21, 2021. Retrieved July 21, 2021.
2. "Zammis Clark Breach". RGDWiki. from the original on March 15, 2021. Retrieved March 21, 2021.
3. Robinson, Andy (May 4, 2020). "Nintendo has reportedly suffered a significant legacy console leak". Video Games Chronicle. from the original on May 5, 2020. Retrieved May 4, 2020.
4. Warren, Tom (March 28, 2019). "Security researcher pleads guilty to hacking into Microsoft and Nintendo". The Verge. from the original on March 28, 2019. Retrieved July 30, 2020.
5. Kirk, Jeremy (May 4, 2020). "Nintendo Source Code for N64, Wii and GameCube Leaked". BankInfoSecurity. from the original on May 4, 2020. Retrieved May 5, 2020.
6. Kan, Michael (May 5, 2020). "Report: Source Code for Older Nintendo Gaming Systems Leaks Online". PC Magazine. from the original on May 6, 2020. Retrieved May 5, 2020.
7. Patino, Martin (June 2018). "Leaked Pokemon Gold and Silver Beta Demos Show Features Cut From Final Games". Game Revolution. from the original on January 15, 2021. Retrieved January 13, 2021.
8. Gach, Ethan (May 4, 2020). "Massive Nintendo Leak Reportedly Includes Wii Source Code, Developer Materials, And N64 Test ROMs". Kotaku. from the original on May 5, 2020. Retrieved May 4, 2020.
9. "These are the best-selling Nintendo consoles and games of all time". CNET. March 11, 2017. from the original on July 9, 2016. Retrieved May 5, 2020.
10. Lee, Timothy B. (October 17, 2013). "Nintendo says this amazing Super Mario site is illegal. Here's why it shouldn't be. (Updated)". The Washington Post. from the original on November 24, 2020. Retrieved May 5, 2020. Nintendo respects the intellectual property rights of other companies, and in turn expects others to respect ours as well," Nintendo said in an e-mailed statement. "Nintendo is seeking the removal of the content, as we vigorously protect against infringement of our intellectual property rights.
11. "Corporate Information – Legal Information (Copyrights, Emulators, ROMs, etc.)". Nintendo. from the original on June 18, 2016. Retrieved May 5, 2020.
12. "Nintendo Switch leaker admits child sex abuse". BBC. February 3, 2020. from the original on August 9, 2021. Retrieved February 4, 2020.
13. Kirk, Tristan (March 29, 2019). Autistic man, 24, spared jail for Nintendo cyber attacks after court is told 'he can't help himself', The Standard. from the original on December 4, 2020. Retrieved April 30, 2024.
14. Hernandez, Patricia (July 26, 2020). "Massive Nintendo leak reveals early Mario, Zelda, and Pokémon secrets". Polygon. from the original on July 26, 2020. Retrieved September 5, 2020.
15. Hernandez, Patricia (July 26, 2020). "Massive Nintendo leak reveals early Mario, Zelda, and Pokémon secrets". Polygon. from the original on July 26, 2020. Retrieved July 27, 2020.
16. Robinson, Andy (July 24, 2020). "An alleged Nintendo leak has unearthed early game prototypes". Video Games Chronicle. from the original on July 25, 2020. Retrieved July 25, 2020.
17. Yin-Poole, Wesley (July 24, 2020). "Alleged Nintendo "gigaleak" reveals eye-opening prototypes for Yoshi's Island, Super Mario Kart, Star Fox 2 and more". Eurogamer. from the original on July 25, 2020. Retrieved July 24, 2020.
18. Fearn, Nicholas (July 28, 2020). "Disney, Microsoft, Nintendo and 50 more hit by massive source code leak [updated]". Tom's Guide. from the original on July 28, 2020. Retrieved May 26, 2021.
19. McFerran, Damien (September 3, 2020). "Turns Out Nintendo Was Thinking About A Switch-Style Device Back In The GameCube Era". NintendoLife. from the original on September 4, 2020. Retrieved September 6, 2020.
20. Fischer, Tyler (September 2, 2020). "Nintendo Leak Reveals Portable GameCube Console". Comicbook.com. from the original on September 3, 2020. Retrieved September 6, 2020.
21. Phillips, Tom (September 4, 2020). "Latest Nintendo leaks suggest company mulled portable GameCube". Eurogamer. from the original on September 4, 2020. Retrieved September 6, 2020.
22. "Wii Startup Disc (found software disc; 2006)". Lost Media Wiki. March 21, 2021. from the original on March 21, 2021. Retrieved March 22, 2021.
23. Walker, Ian (September 10, 2020). "New Nintendo Leak Includes Numerous Unreleased Game Boy Games". Kotaku. from the original on September 11, 2020. Retrieved September 10, 2020.
24. @Akfamilyhome (September 30, 2020). "So there's a fresh new Nintendo leak, which out of a lot of other things includes a never-released Disk System port of Balloon Fight, so here it is: the first (?) Balloon Fight Famicom disk running on console" (Tweet). Retrieved September 30, 2020 – via Twitter.
25. Robinson, Andy (December 22, 2020). "Nintendo has reportedly suffered another major data leak, now related to Switch". Video Games Chronicle. from the original on December 22, 2020. Retrieved December 22, 2020.
26. @ForestofIllusion (July 20, 2021). "A prototype of Pokemon Lets Go Eevee also leaked" (Tweet). Retrieved July 20, 2021 – via Twitter.
27. @ForestofIllusion (July 20, 2021). "There's been a new Nintendo leak from the "Gigaleak lot" of files from last year. The leak contains source code to a Wii Service program (an upgraded version of GameCube Service Disc), and some documentation for various systems including the Nintendo Switch" (Tweet). Retrieved July 20, 2021 – via Twitter.
28. Walker, Ian (July 20, 2021). "Early Wiimote Designs Uncovered In Leaked Nintendo Emails". Kotaku. from the original on July 20, 2021. Retrieved July 20, 2021.
29. Robinson, Andy (May 4, 2020). "Nintendo has reportedly suffered a significant legacy console leak". Video Games Chronicle. from the original on May 5, 2020. Retrieved May 4, 2020.
30. "Nintendo Source Code Leak Releases Tons of Behind-The-Scenes Data". TechRaptor. July 24, 2020. from the original on July 25, 2020. Retrieved July 27, 2020.
31. Doolan, Liam (May 4, 2020). ""Massive" Nintendo Leak Reveals All About The Wii Generation – Source Code, Design Files And Much More". Nintendo Life. from the original on May 3, 2020. Retrieved May 4, 2020.
32. White, Lucas (May 3, 2020). "Massive Nintendo Leak Reveals Wii Code, N64 Demos, and Early Pokemon Designs". Siliconera. from the original on May 4, 2020. Retrieved May 4, 2020.
33. "Alleged plans for a GBA Pokémon MMO have surfaced". VGC. July 25, 2020. from the original on July 27, 2020. Retrieved July 27, 2020.
34. Williams, Leah (July 27, 2020). "Everything Revealed In Nintendo's Largest Gigaleak Ever". Kotaku. from the original on July 27, 2020. Retrieved July 30, 2020.
35. Zarra, Jonathan. "Massive Nintendo "Gigaleak" Surfaces With ROMs, Canceled Games, and Much More". Switcher.gg. from the original on July 25, 2020. Retrieved July 24, 2020.
36. Orland, Kyle (July 27, 2020). "Huge apparent leak unearths Nintendo's prototype history". Ars Technica. from the original on July 29, 2020. Retrieved July 30, 2020.
37. "Mario 64 once had a co-op mode". Destructoid. November 25, 2009. from the original on March 7, 2012. Retrieved August 30, 2011.
38. Phillips, Tom (July 28, 2020). "Legend of Zelda gigaleak reveals Ocarina of Time and Majora's Mask cut content". Eurogamer. from the original on July 30, 2020. Retrieved July 30, 2020.
39. "Modders Fully Restore Ocarina of Time Beta Dungeon, Runs on Nintendo 64 Hardware". Zelda Dungeon. August 5, 2020. from the original on September 29, 2020. Retrieved October 15, 2020.
40. Bankhurst, Adam (December 27, 2020). "A Lost Game Boy Add-On Called the WorkBoy Has Been Found After 28 Years". IGN. from the original on January 26, 2021. Retrieved December 29, 2020.
41. Porter, Jon (February 5, 2021). "Listen to this amazing remaster of Super Mario World's soundtrack". The Verge. from the original on February 5, 2021. Retrieved February 7, 2021.
42. Dolphin [@Dolphin_Emu] (May 3, 2020). "We cannot use anything of any sort from a leak. In fact, we can't even look at it. Dolphin is only legal because we are clean room reverse engineering the GameCube and Wii. If we use anything from a leak, Dolphin is no longer legal and Nintendo *will* shut us down" (Tweet). Retrieved May 5, 2020 – via Twitter.
43. Chandler, Sam (May 4, 2020). "Nintendo leak reveals Wii source code, N64 test ROMs, GameCube dev tech, & more". Shacknews. from the original on May 12, 2020. Retrieved May 6, 2020.
44. Webster, Andrew (July 30, 2020). "An unprecedented Nintendo leak turns into a moral dilemma for archivists". The Verge. from the original on July 30, 2020. Retrieved July 30, 2020.
45. Bonthuys, Darryn (June 29, 2022). . GameSpot. Archived from the original on July 15, 2022. Retrieved July 16, 2022.{{cite web}}: CS1 maint: bot: original URL status unknown (link)
46. Robinson, Andy (June 29, 2022). "Nintendo says it increased security following a prolific leak of game prototypes". Video Games Chronicle. from the original on July 8, 2022. Retrieved July 16, 2022.
47. Cryer, Hurin (July 4, 2022). "Nintendo has increased security following 2020's "gigaleak"". GamesRadar+. from the original on July 6, 2022. Retrieved July 16, 2022.