Nintendo Japan confirmed on April 24 what many had suspected since the beginning of April, that the NNID system has been breached and account information was stolen.
The breach, according to Nintendo, began at the start of April and effected “around 160,000 accounts.”
Nintendo recommends that all users change their passwords and set-up 2-factor verification on their Nintendo Accounts, and have stopped people from being able to log into their accounts via their Nintendo Network ID.