It's not been the best few months for CD Projekt Red.
Following the tumultuous release of Cyberpunk 2077 that saw the game removed from the PlayStation Store, the company resorted to issuing refunds to console players disappointed with the final product.
As CDPR moved into 2021 and their share price was slowly rising back up, things were looking up, especially with the release of their Cyberpunk 2077 roadmap. However, the company has once again found itself in trouble...
UPDATE: Cyberpunk 2077 and The Witcher 3 source code alleged to be auctioned
The data stolen by hackers in the CD Projekt Red breach earlier this week is allegedly now at auction, following the 48 hour period CDPR were given to respond to the ransom demands.
As reported by Tom's Hardware, the source code obtained for Cyberpunk 2077 and an unreleased version The Witcher 3 is apparently now at auction via the EXPLOIT forum. The starting bid is $1m, or can be bought immediately for $7m.
The cybersecurity company KELA spoke to The Vergeabout the auction, and said: "We do believe that this is a real auction by a real seller who accessed the data. The seller offers to use a guarantor and he allows only those who have a deposit to participate — a tactic that is used by many sellers to show that they are serious and to ensure that no scam will occur."
Hackers break into CD Projekt's internal system
In the early hours of February 9, CD Projekt Red shared a message on Twitter stating the company was "a victim of a targeted cyber attack" that compromised its internal systems.
According to the tweet, an "unidentified actor" broke into the network and collected data belonging to CD Projekt, which was then held at ransom. CDPR said that while some devices have been encrypted, they have already begun restoring data via their backup devices.
It also confirmed that the incident "did not contain any personal data of our players or users of our services."
However, that's not where the story ends as, in a rather unprecedented move, CDPR also released the ransom note they received...
CD Projekt RED release ransom note
Along with the update, CD Projekt Red also shared the ransom note they received from the hacker.
"Your have been EPICALLY pwned!!" the note began.
According to the hacker, they now have full copies of the source code for Cyberpunk 2077, The Witcher 3 (and its unreleased version) and Gwent, along with various administrative documents.
The hacker warned that if CD Projekt Red did not come to an agreement with the hacker in the next 48 hours, they would sell or leak the source code and documents online.
The attached file did not disclose what demands the hacker set, but CDPR also said: "We will not give in to the demands nor negotiate with the actor, being aware that this may eventually lead to the release of the compromised data."