CD Projekt Becomes a Victim of Cyber Attack, Source Code Leaked Online

CD Projekt has reported that yesterday they have become a victim of a targeted cyber attack and the source code of the company’s games may have been leaked.

The incident was reported on its official Twitter account by the company itself. According to CD Projekt, the hackers also left a message, which was shared by the company in the same tweet.

According to the attached message, hackers could have gained access to the source code of Cyberpunk 2077, The Witcher 3, Gwent, as well as the yet to be released version of The Witcher 3 for PS5, Xbox Series, and PC. The stolen company data may also include various documents, including financial ones.

Below we report the information released by the company:

Yesterday we discovered that we have become a victim of a targeted cyber attack, due to which some of our internal systems have been compromised.

An unidentified actor gained unauthorized access to our internal network, collected certain data belonging to CD PROJEKT capital group, and left a ransom note the content of which we release to the public. Although some devices in our network have been encrypted, our backups remain intact. We have already secured our IT infrastructure and begun restoring the data.

We will not give in to the demands nor negotiate with the actor, being aware that this may eventually lead to the release of the compromised data. We are taking necessary steps to mitigate the consequences of such a release, in particular by approaching any parties that may be affected due to the breach.

We are still investigating the incident, however, at this time we can confirm that —to our best knowledge — the compromised systems did not contain any personal data of our players or users of our services.

We have already approached the relevant authorities, including law enforcement and the President of the Personal Data Protection Office, as well as IT forensic specialists, and we will closely cooperate with them in order to fully investigate this incident.

CD Projekt itself says that they are not going to negotiate with hackers, although it is aware of the possible consequences of this decision.