Top Games

CD Projekt Targeted in Ransomware Attack, Source Code Stolen

CD Projekt says it will not negotiate with the hackers responsible for the breach.
CD Projekt says it will not negotiate with the hackers responsible for the breach. | Photo courtesy of CD Projekt Red

CD Projekt, the company that owns the developer of Cyberpunk 2077 and The Witcher 3, says it has been the victim of a ransomware attack. The attackers threaten to release the source codes for Cyberpunk 2077, The Witcher 3, Gwent, and an unreleased version of The Witcher 3 — likely the next-gen re-release of the game scheduled for release later this year.

"You have been EPICALLY pwned!!" reads the ransom note CD Projekt found Monday.

The hackers claim to have all of CD Projekt's documents "relating to accounting, administration, legal, HR, investor relations and more," and have encrypted all of the company's servers. The hackers say they will leak all the stolen information and code if CD Projekt Red fails to contact them within 48 hours.

"IF we will not come to an agreement, then your source codes will be sold or leaked online and your documents will be sent to our contacts in gaming journalism," the ransom note continues. "Your public image will go down the shitter even more and people will see how shitty your company functions."

An official statement from CD Projekt says it will not negotiate with the hackers, risking the public release of the hacked information and code.

"We are taking necessary steps to mitigate the consequences of such a release, in particular by approaching any parties that may be affected due to the breach," CD Projekt said. The company also says no personal data belonging to its players or users of its GOG service has been compromised.

"We have already approached the relevant authorities, including law enforcement and the President of the Personal Data Protection Office, as well as IT forensic specialists, and we will closely cooperate with them in order to fully investigate this incident," CD Projekt said.