OrganisationJP

Nintendo

Japanese video game and console maker.

Nintendo is a Kyoto-based Japanese entertainment company that develops video game consoles, software, characters and the online services connecting them.

Last refreshed: 22 October 2026 · Appears in 1 active topic

Key Question

Which Nintendo services stayed offline while administrators closed the PHP exposure?

Timeline for Nintendo

#15 21 Oct

Took services offline before a fix existed

Cybersecurity: Threats and Defences: PHP2Shell: no fix for PHP 8.1 and older

View full timeline →

Follow Cybersecurity: Threats and Defences →

Background

Nintendo Co., Ltd. is a Japanese entertainment company headquartered in Kyoto. It develops and sells video game hardware, software and related services. The company is best known for operating an integrated business around its own consoles, games and characters rather than supplying only one part of the market.

That model gives Nintendo control over the devices, software and online services through which customers use its products. Account access, digital distribution, multiplayer features and service availability are therefore part of the customer experience as well as technical infrastructure.

Common Questions

What does Nintendo make?

Nintendo describes its business as the manufacture and sale of home entertainment products.Source: Nintendo

Where is Nintendo based?

Nintendo Co., Ltd. is headquartered in Kyoto, Japan.Source: Nintendo

Why did Nintendo services go offline during PHP2Shell?

Nintendo took services offline while addressing the critical PHP flaws; reporting did not identify a successful breach.Source: The Record

Source Material

Hundreds of websites taken offline as concern grows over two PHP vulnerabilities Company Profile

How the World Sees Them

FirstVDS

There are no traces of the attack on the affected virtual servers

ESET

first documented case of Yggdrasil being abused in this way by a state-aligned threat actor

Cyber Security Agency of Singapore

Attackers are exploiting

Canadian Centre for Cyber Security

open-source reporting indicating that the vulnerability is being exploited in the wild

Ahold Delhaize (Frans Muller)

was caused by the malicious actions of others

ENISA

the manufacturer is not required to comply with the vulnerability handling obligations

CERT-FR (ANSSI)

probablement toujours en cours

ASOS

impersonating a trusted contact

Check Point

actively exploited on Spark Firewalls as of September 12, 2026

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.