CD Projekt Red hack: Cyberpunk 2077 and Witcher 3 source code reportedly on sale at auction

share to other networks share to twitter share to facebook

It's not been the best few months for CD Projekt Red.

Following the tumultuous release of Cyberpunk 2077 that saw the game removed from the PlayStation Store, the company resorted to issuing refunds to console players disappointed with the final product.

As CDPR moved into 2021 and their share price was slowly rising back up, things were looking up, especially with the release of their Cyberpunk 2077 roadmap. However, the company has once again found itself in trouble...

READ MORE: Ori developer slams Cyberpunk 2077 marketing lies: “We should all agree that this sh*t is not okay”

Advertisement

UPDATE: Cyberpunk 2077 and The Witcher 3 source code alleged to be auctioned

The data stolen by hackers in the CD Projekt Red breach earlier this week is allegedly now at auction, following the 48 hour period CDPR were given to respond to the ransom demands.

As reported by Tom's Hardware, the source code obtained for Cyberpunk 2077 and an unreleased version The Witcher 3 is apparently now at auction via the EXPLOIT forum. The starting bid is $1m, or can be bought immediately for $7m.

The cybersecurity company KELA spoke to The Vergeabout the auction, and said: "We do believe that this is a real auction by a real seller who accessed the data. The seller offers to use a guarantor and he allows only those who have a deposit to participate — a tactic that is used by many sellers to show that they are serious and to ensure that no scam will occur."

Advertisement

Hackers break into CD Projekt's internal system

In the early hours of February 9, CD Projekt Red shared a message on Twitter stating the company was "a victim of a targeted cyber attack" that compromised its internal systems.

According to the tweet, an "unidentified actor" broke into the network and collected data belonging to CD Projekt, which was then held at ransom. CDPR said that while some devices have been encrypted, they have already begun restoring data via their backup devices.

It also confirmed that the incident "did not contain any personal data of our players or users of our services."

Advertisement

However, that's not where the story ends as, in a rather unprecedented move, CDPR also released the ransom note they received...

READ MORE: Cyberpunk 2077 fake demo: CD Projekt Red reacts to reports that the E3 2018 demo was a fake

CD Projekt RED release ransom note

Along with the update, CD Projekt Red also shared the ransom note they received from the hacker.

"Your have been EPICALLY pwned!!" the note began.

According to the hacker, they now have full copies of the source code for Cyberpunk 2077, The Witcher 3 (and its unreleased version) and Gwent, along with various administrative documents.

The hacker warned that if CD Projekt Red did not come to an agreement with the hacker in the next 48 hours, they would sell or leak the source code and documents online.

The attached file did not disclose what demands the hacker set, but CDPR also said: "We will not give in to the demands nor negotiate with the actor, being aware that this may eventually lead to the release of the compromised data."

READ MORE: How Cyberpunk 2077 could become “the next Skyrim”