Game Freak, the lead developer of Pokémon games, has suffered a major data breach. Employees’ personal information was published online, as was extensive Pokémon documentation, including source code for complete builds of previous games.

In a statement, Game Freak said the leak was the result of “unauthorized third-party access to our servers” and apologized for disclosing over 2,600 pieces of personal information. It said the breach occurred in August 2024 and the affected server had already been restored.

The information gleaned from the leaked files surfaced widely on Saturday and Sunday, and Game Freak’s statement surfaced online on Sunday. However, the statement is dated Thursday, October 10th. The statement discusses the disclosure of employees’ personal information, but does not mention the release of confidential gaming data.

“Game Freak (…) has discovered that personal information of our employees and others was leaked in connection with unauthorized third-party access to our servers in August 2024,” the studio’s statement reads (via machine translation). “We sincerely apologize for the great inconvenience and distress this has caused to everyone involved.”

Game Freak said it was contacting affected employees individually. “We have already rebuilt and re-verified the server and will endeavor to prevent a recurrence by further strengthening our security measures,” it said.

Polygon has reached out to The Pokémon Company for comment. Game Freak is one of three stakeholders in Pokémon, along with Nintendo and Creatures Inc., the developer of Pokémon Pokémon trading card game.