Free tools Windows power users keep installed
One-click scans. No signup required.
Game Freak confirmed that an unauthorized third party accessed its servers in August 2024 and that 2,606 personnel records were affected. The company identified the exposed information as names and company email addresses. A much larger body of purported Pokémon development material later circulated online under the fan-made name “Teraleak,” but Game Freak’s official notice did not authenticate or provide a complete inventory of those files.
Nintendo later sought a U.S. court-authorized Discord subpoena to identify an account associated with the alleged distribution of some of that material. That legal filing established Nintendo’s enforcement effort—not the identity of the original intruder or the authenticity of every file shared online.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
The Art and Making of Arcane (Gaming) | $29.45 | Buy on Amazon |
| 2 |
|
Dark Souls: Design Works | $22.02 | Buy on Amazon |
| 3 |
|
NieR Art - Koda Kazuma Works | $16.01 | Buy on Amazon |
| 4 |
|
The Legend of Zelda: Art & Artifacts | $23.37 | Buy on Amazon |
| 5 |
|
Elden Ring: Official Art Book Volume III: Shadow of the Erdtree | $33.94 | Buy on Amazon |
As an Amazon Associate I earn from qualifying purchases.
The confirmed facts at a glance
- Game Freak said it discovered unauthorized third-party access to its servers in August 2024.
- In an official notice dated October 10, 2024, the company said 2,606 personnel records were affected.
- The confirmed exposed fields were names and company email addresses, involving current employees, contract workers, former employees, and other former personnel.
- Game Freak said it would contact affected people, rebuild and reinspect its servers, and strengthen its security measures.
- Reports later described a much broader collection of purported internal Pokémon material, including source code, development assets, internal documents, and information about unannounced projects. Those claims were not itemized or authenticated in Game Freak’s breach notice.
- On April 18, 2025, Nintendo of America asked a federal court for a DMCA subpoena directed to Discord in an effort to identify the account “GameFreakOUT,” associated with a server called “FreakLeak.”
That distinction matters. There is a confirmed Game Freak security incident and confirmed exposure of personnel information. There is also a broader, partly unverified body of material that was allegedly taken from or connected to the incident. Treating every online claim as officially confirmed overstates what Game Freak has said.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What Game Freak officially confirmed
Game Freak’s October 10 notice described unauthorized access by a third party to the company’s servers during August 2024. The notice apologized and said that information relating to personnel had been exposed.
#1 Best Overall
The company gave a specific figure: 2,606 records. It said those records included names and company email addresses belonging to employees, contract workers, former employees, and other former personnel. The figure should not automatically be read as 2,606 unique people; the notice referred to affected records.
Game Freak said it planned to contact affected individuals directly. Where direct contact was not possible, it said it would establish a contact route for inquiries. It also said it had rebuilt and reinspected servers and would reinforce its security controls.
The official notice did not publish a detailed list confirming the exposure of Pokémon source code, unreleased game builds, future release schedules, film or animation plans, lore documents, or other development assets. Those subjects came from subsequent reporting and analysis of material circulating online.
One security-industry roundup from Check Point reported that player data was not affected. That is useful context, but it should be attributed to the security-industry summary rather than presented as a detailed public forensic report from Game Freak. Game Freak’s own notice, as described above, focused on the unauthorized access and personnel information.
What is the “Teraleak”?
“Teraleak” is a fan and media nickname for the large volume of purported Game Freak and Pokémon-related material that began circulating in October 2024. It is not an official name for the incident.
Rank #2
Contemporaneous reports and leak-community analysis described material said to include:
- source code from older Pokémon games;
- prototype, unused, or early-stage art and game assets;
- internal development documentation;
- concept material and design information;
- details about unannounced or prospective Pokémon projects; and
- possible information concerning film, animation, or other media projects.
Some reporting described the purported release as approximately one terabyte of data. Other coverage discussed later releases involving tens of gigabytes. Those figures are not interchangeable, and neither should be treated as an official Game Freak measurement. The total volume, provenance, completeness, and authenticity of individual files were not established by the company’s public breach notice.
Recommended Free Tools
The safest description is therefore that a substantial quantity of internal material was reported to have circulated after the breach. Individual files may be genuine, altered, incomplete, misidentified, or unrelated. A screenshot or archive posted by an anonymous account is not, by itself, proof of its origin.
Timeline of the Game Freak breach and its aftermath
| Date | What happened | What it establishes |
|---|---|---|
| August 2024 | Game Freak said it discovered unauthorized access by a third party to its servers. | A company-acknowledged security incident occurred during this month. |
| October 10, 2024 | Game Freak published an apology and incident notice. | The company confirmed exposure of personnel information and identified 2,606 affected records containing names and company email addresses. |
| October 2024 | Large quantities of purported Pokémon development material appeared online and were discussed by news outlets and leak researchers. | Reports alleged exposure of source code, assets, documents, and prospective-project information, but Game Freak did not publicly authenticate a complete inventory. |
| October 14–20, 2024 | Check Point summarized the incident and separate reports about the purported leak. | The security-industry account provided additional context, including a report that player data was not affected. |
| April 18, 2025 | Nintendo of America filed a request in the U.S. District Court for the Northern District of California for a DMCA subpoena directed to Discord. | Nintendo sought identifying information for the Discord account “GameFreakOUT,” associated with the “FreakLeak” server. |
| April 22–23, 2025 | GameSpot and PC Gamer reported on Nintendo’s filing. | The requested information reportedly included identifying details such as a name, address, telephone number, email address, IP address, or other information available to Discord. |
| Later coverage | Additional material was reported as appearing or being released after the main October 2024 wave. | A later upload is not automatically evidence of a second breach. Some reporting warned that later claims could involve delayed publication of material from the original incident. |
Confirmed information versus online claims
The easiest way to understand the story is to separate statements supported by company or court records from claims based on leak analysis.
| Claim | Status | Careful wording |
|---|---|---|
| Unauthorized access occurred in August 2024. | Confirmed by Game Freak | Game Freak said a third party accessed its servers. |
| Personnel information was exposed. | Confirmed by Game Freak | The company identified names and company email addresses. |
| 2,606 records were affected. | Confirmed by Game Freak | The number refers to affected records involving current, former, and contract personnel. |
| Game Freak rebuilt and reinspected servers. | Confirmed by Game Freak | This was part of the company’s stated remediation response. |
| A large amount of Pokémon source code and development material circulated. | Reported by outside sources | Describe the material as purported or allegedly leaked unless a particular file has independent confirmation. |
| The leak contained exactly one terabyte of data. | Not established by Game Freak’s notice | Some reports used that approximate figure, while other coverage described different quantities. |
| Every unreleased Pokémon project discussed online is real. | Unconfirmed | Alleged codenames, concepts, films, games, and plans require separate verification. |
| The original attacker has been identified. | Unconfirmed | Nintendo’s Discord subpoena request sought to identify an alleged distributor; it did not prove that account conducted the intrusion. |
| A second Game Freak hack occurred in 2026. | Not established by the available evidence | Later releases may have been delayed publication from the 2024 incident rather than a new intrusion. |
Nintendo’s legal response focused on alleged distribution
Nintendo of America’s April 18, 2025 filing asked the Northern District of California for permission to serve Discord with a DMCA subpoena. The request named the Discord account “GameFreakOUT” and the “FreakLeak” server.
Rank #3
According to the filing and contemporaneous reporting, Nintendo wanted information that could identify the account holder, potentially including a name, address, telephone number, email address, IP address, or other information held by Discord. The filing alleged that the account had posted Pokémon-related material that infringed Nintendo’s rights.
This was an enforcement and identification step. It was not a court finding that the account holder originally broke into Game Freak’s systems. The account could have been an alleged distributor, reposting source, or another participant in the online circulation of the files. The filing alone does not establish the person’s identity, the original intrusion method, or the complete chain of custody for the material.
News reports also described takedown notices connected with the material. The defensible wording is that Nintendo sought identification and enforcement-related information. Unless a later primary court record confirms more, it is not accurate to say that Nintendo identified the hacker, obtained a final judgment, or completed recovery of the leaked data.
What remains unknown
Several important questions were not answered by Game Freak’s public notice or by Nintendo’s subpoena request:
- How the intrusion happened: The public notice did not explain the initial access method, such as compromised credentials, a software vulnerability, phishing, or another route.
- The full data inventory: Game Freak confirmed personnel information, but it did not publicly provide a complete forensic list of every accessed or copied system and file.
- The status of individual leaked files: Reports may accurately identify some genuine material, but the authenticity and completeness of every archive, document, image, build, and source-code sample remain separate questions.
- The original intruder’s identity: Nintendo’s subpoena request targeted information about a Discord account associated with alleged distribution. It did not, by itself, connect that account to the original unauthorized access.
- The meaning of later leak waves: Material appearing months later could be newly published files from the original incident, altered or recycled content, or evidence of another event. A new upload date does not prove a new breach.
- The effect on future projects: Online discussions may speculate about development plans, but leaked concepts or internal references do not necessarily represent approved, active, or planned releases.
Privacy and safety considerations
The confirmed personnel data consisted of names and company email addresses. Readers and publishers should not reproduce employee names, email addresses, screenshots, credentials, phone numbers, home addresses, or links to stolen archives. Republishing sensitive material can extend the harm to people who were not responsible for the breach and can expose them to phishing, harassment, impersonation, or spam.
Rank #4
- The Legend of Zelda: Art and Artifacts contains over four hundred pages of fully realized illustrations from the entire thirty-year history of The Legend of Zelda including artwork from The Legend of Zelda: Breath of the Wild!
- Every masterwork is printed on high-quality paper in an oversized format so you can immerse yourself in the fine details of each piece.
- This book includes rare promotional pieces, game box art, instruction booklet illustrations, official character illustrations, sprite art, interviews with the artists, and much, much more!
- Hardcover: 427 pages.
The same caution applies to purported development files. Downloading or sharing stolen archives can create legal and security risks, including malware hidden in files, compromised links, credential theft, and further distribution of personal information. Readers who encounter claims about the leak should rely on reputable reporting and official legal or company records rather than downloading unverified material.
For people who may have been affected by the personnel-data exposure, the relevant response described by Game Freak was individual outreach and a contact route for people it could not reach directly. Anyone receiving an unexpected message claiming to be related to the incident should independently verify the sender before opening attachments, following links, or providing credentials.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to evaluate a new “Game Freak leak” claim
- Check the date. A file posted in 2026 may still come from the August 2024 incident. Publication date and intrusion date are not the same thing.
- Identify the source. Anonymous posts and leak-community summaries can point journalists toward material, but they do not carry the same evidentiary weight as a company notice or court record.
- Separate a file from the claim around it. Even if an image or document is genuine, its interpretation may be wrong. A prototype, discarded concept, internal test, or placeholder is not proof of a future release.
- Look for independent confirmation. Multiple accounts repeating the same anonymous claim do not necessarily provide independent verification.
- Do not treat a precise number as proof. Reported quantities ranging from tens of gigabytes to approximately one terabyte may refer to different releases, archives, or estimates.
- Avoid personal data and stolen downloads. There is no need to reproduce sensitive information to explain what happened.
Why the wording matters
Calling this simply “the Pokémon leak” can collapse several different facts into one headline. Game Freak did confirm a server intrusion and personnel-data exposure. Separately, outside sources reported a much broader leak of development material. Nintendo then pursued information about an account alleged to have distributed Pokémon-related content.
Those facts are related, but they are not interchangeable. The company’s notice does not confirm every file discussed online. The reported size of the leak is not the same as a confirmed forensic total. A subpoena request is not an identification or conviction. And later uploads are not automatically evidence of another breach.
That careful framing is especially important because the incident affects both intellectual property and real people. The public record supports reporting the confirmed breach, the exposed personnel records, the reported scope of the Teraleak, and Nintendo’s legal response without amplifying private information or presenting speculation as fact.
Best Value
Reporting basis: Game Freak’s October 10, 2024 incident notice; Nintendo of America’s April 18, 2025 DMCA subpoena request in the Northern District of California; contemporaneous reporting from GameSpot and PC Gamer; and Check Point’s October 2024 security-industry summary. Claims about the broader body of leaked development material remain qualified where they were not confirmed in Game Freak’s notice.
Frequently Asked Questions
Did Game Freak confirm the entire Teraleak?
No. Game Freak confirmed unauthorized server access in August 2024 and exposure of 2,606 personnel records containing names and company email addresses. The broader claims about source code, prototypes, internal documents, and unreleased projects came from outside reporting and leak analysis, not a complete public inventory from Game Freak.
What personal information was exposed?
Game Freak identified names and company email addresses in 2,606 affected records involving employees, contract workers, former employees, and other former personnel. Do not assume that phone numbers, home addresses, credentials, or other categories were confirmed exposed by the company’s notice.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchDid Nintendo identify the person behind the breach?
Not according to the cited filing. Nintendo of America sought a DMCA subpoena to Discord for information about the account “GameFreakOUT,” associated with the “FreakLeak” server. That request concerned alleged online distribution and did not by itself prove that the account holder conducted the original intrusion.
Was there a second Game Freak hack in 2026?
The available reporting does not establish that later releases represented a second intrusion. Some coverage warned that later material could have been delayed publication from the 2024 incident. A later upload date alone is not proof of a new hack.
The Bottom Line
Bottom line: Game Freak confirmed a real August 2024 unauthorized-access incident and exposure of 2,606 personnel records containing names and company email addresses. The much larger “Teraleak” is a body of purported development material reported and analyzed outside Game Freak’s official notice. Nintendo’s later Discord subpoena request shows an effort to identify an alleged distributor, not a confirmed identification of the original attacker. The scope, authenticity, and ultimate legal outcome of the broader leak remain only partly established.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →
