Nintendo says 140,000 more NNID accounts were vulnerable
But it isn't (technically) all Nintendo's fault.
NNID
Nintendo blocks legacy logins after 160,000 accounts were compromised (update)
Hackers used insecure legacy accounts to access PayPal funds.
