CD Projekt Red is the victim of a cyberattack that resulted in hackers stealing the source code of both Cyberpunk 2077 and The Witcher 3. The Polish studio believes no personal data was stolen during the attack.
The developer shared a statement about the attack on Twitter and shared the ransom note it received. Alongside source code, the hackers claim they stole documents pertaining to HR, investor relations, and more. The note threatens to sell the information or leak it to the press if CD Projekt Red does not reach an agreement with the hackers within 48 hours.
Important Update pic.twitter.com/PCEuhAJosR
— CD PROJEKT RED (@CDPROJEKTRED) February 9, 2021
CD Projekt Red confirmed that the attack occurred, but says it will not negotiate with the cybercriminals despite the threats.
“We will not give in to demands not negotiate with the actor, being aware that this may eventually lead to the release of the compromised data,” says CD Projekt Red. “We are taking necessary steps to mitigate the consequences of such a release, in particular by approaching any parties that may be affected due to the breach.”
The attack comes in response to Cyberpunk 2077‘s controversial release, which led to the game being removed from the PlayStation Store entirely. The ransom note says “Your public image will go down the shitter even more and people will see how you [sic] shitty your company functions.”
The company says that its backups are still intact, despite some of its devices being encrypted by hackers. CD Projekt Red has already begun to restore its data and secure its IT infrastructure. The studio is working with law enforcement to investigate the crime.
