Nintendo notified global users of a massive surge in unauthorized account takeovers targeting Nintendo Network IDs. Attackers bypassed basic authentication controls to purchase virtual items using linked PayPal and credit card parameters before being contained.