Hacker who stole proprietary information from Nintendo sentenced to three years in prison
Earlier this year, Ryan Hernandez pleaded guilty to federal crimes related to a Nintendo computer hacking scheme. Hernandez had leaked pre-release information about Switch, and despite a warning that followed, later hacked into multiple Nintendo servers and stole confidential information about games, consoles, and developer tools.
Today, Hernandez was sentenced to three years in prison “for federal crimes related to his computer hacking scheme and his possession of child pornography found on his digital devices”. He also agreed to pay $259,323 to Nintendo in damages. Once the sentence is up, Hernandez will carry out seven years of supervised release and will be required to register as a sex offender.
The full notice from the United States Department of Justice reads:
Seattle – A 21-year-old Palmdale, California, man was sentenced to three years in prison today in U.S. District Court in Seattle for federal crimes related to his computer hacking scheme and his possession of child pornography found on his digital devices, announced U.S. Attorney Brian T. Moran. RYAN S. HERNANDEZ, aka Ryan West, who used the online moniker “RyanRocks,” pleaded guilty to a two-count information in January 2020. At the sentencing hearing U.S. District Judge John C. Coughenour ordered HERNANDEZ to be on seven years of supervised release following prison. He will be required to register as a sex offender.
According to records filed in the case, in 2016, while still a minor, HERNANDEZ and an associate used a phishing technique to steal credentials of a Nintendo employee, which were exploited to gain access to and download confidential Nintendo files related to its consoles and games. That stolen information, including pre-release information about the anticipated Nintendo Switch console, was leaked to the public. In October 2017, following an investigation into the hack, FBI agents contacted HERNANDEZ and his parents at their California residence. HERNANDEZ promised to stop any further malicious activity and confirmed that he understood the consequences of any future hacking.
Nevertheless, from at least June 2018 to June 2019, HERNANDEZ returned to his malicious activities, hacking into multiple Nintendo servers and stealing confidential information about various popular video games, gaming consoles, and developer tools. HERNANDEZ boasted about his hacking exploits on several online and social media platforms, such as Twitter and Discord, and leaked some of the stolen information to others. HERNANDEZ further operated an online chat forum called “Ryan’s Underground Hangout” in which he and others discussed Nintendo products and shared information about possible Nintendo network vulnerabilities, and on which he shared some of the confidential information he had stolen.
In June 2019, FBI agents searched HERNANDEZ’s home and seized numerous electronic devices, including computers, hard drives, and circumvention devices used to access pirated video games and software. On those devices, they discovered thousands of confidential Nintendo files. Forensic analysis of his devices also revealed that HERNANDEZ had used the internet to collect more than one thousand videos and images of minors engaged in sexually explicit conduct, stored and sorted in a folder directory he labeled “Bad Stuff.”
Under the terms of the plea agreement, both prosecutors and defense attorneys recommended three years in prison. Judge Coughenour recommended HERNANDEZ be incarcerated at a Bureau of Prisons facility for inmates with cognitive challenges. HERNANDEZ has agreed to pay $259,323 in restitution to Nintendo for the remediation costs caused by his conduct.
The case was investigated by the FBI Seattle Cyber Task Force, and was prosecuted by Assistant United States Attorney Steven Masada.
