Earlier this week CD Projekt Red
announced that its internal network was breached and data stolen, with the hackers leaving a ransom note outlining that it obtained full copies of source code for various titles including Cyberpunk 2077
and The Witcher 3
. CDPR noted that there was no evidence to suggest personal data was accessed, and that it would also not give in to demands.
Here's the announcement, which was made via Twitter.
As per CDPR, law enforcement was involved alongside forensic experts for a full investigation. This week though the ransomed data began to appear online, with evidence of the source code for Gwent popping up as part of an auction on the dark web. According to cybersecurity account vx-underground
and other sources, the auction included a single dump of all source code for games like The Witcher 3, Cyberpunk 2077, and others -- including unreleased versions.
The entry point for bidding was set at $1 million with a potential buyout at $7 million.
As per above (via KELA
), that latter option has happened with a condition of no further distribution for the stolen code was made as part of a sale to an entity outside of the forum that it appeared on. Naturally, there's speculation that CDPR itself paid the sum though that hasn't been confirmed and CD Projekt Red has not commented on these subsequent events. Also, it stated that it would not pay the ransom.