The data breach that occurred at CD Projekt is worse than the company originally suspected, per an announcement made Thursday.
CD Projekt, the parent company of Cyberpunk 2077 developer CD Projekt Red, says that although it can't confirm the exact contents of the stolen data, it may include the details of current, former, and contract employees and data related to the company's games. The data is now believed to be circulating online and may have been tampered with following the breach.
CD Projekt dropped the news during the Summer Game Fest, one of many high profile conferences taking place at E3 2021. It says it's working with international law enforcement agencies, including Interpol and Europol, to retrieve the data.
"We are committed and prepared to take action against parties sharing the data in question," the company wrote.
CD Projekt declined to pay a ransom for the stolen data when the hackers attempted to auction it off in February. The data was sold to an unknown party on the condition it would remain unpublished.
CD Projekt lost a significant amount of its value in the Polish stock market in the wake of Cyberpunk 2077's botched release, and this hack did little to help its outlook. An investment firm called for co-CEOs Adam Kiciński and Marcin Iwiński to step down per a Bloomberg report from earlier this week.
With all that pressure on the company, it's not surprising it would try to bury Thursday's news during the Summer Games Fest Kickoff event. After all, it's hard to imagine better cover than an Elden Ring release date announcement. But the timing is revealing in itself — the breach is probably particularly bad if it merits this approach.
It seems unlikely this controversy will cause CD Projekt leadership to step down or reshuffle, but that option remains on the table.