CD Projekt RED announced this morning that the company has suffered a massive cyberattack by an unidentified actor (most likely someone the studio worked with in the past). To which, some of the company’s internal systems were compromised and as a result, source code from games such as The Witcher 3, Cyberpunk 2077 and a so-called unreleased version of The Witcher 3 was obtained.
CD Projekt RED shared the news on Twitter in the form of a statement. In addition, the company also shared the ransom note left by the unidentified user. The note informs CD Projekt RED of the attack which includes obtaining source code along with documents related to accounting, administration, legal, HR, investor relations and more.
The company says that they have taken measures to secure and encrypt the servers and will most likely recover from the attack by making use of the data backups. The attacker has threatened to share the source codes and leaked documents with the public should the company not come to an agreement. The note reads:
Your public image will go down the shitter even more and people wil see how shitty your company functions. Investors will lose trust in your company and the stock will dive even more lower!
You have 48 hours to contact us.
In a statement, CD Projekt RED assures fans that no personal data was compromised in the attack. They are currently investigating the issue and will not give in to the demands nor negotiate with the actor who gained access to the servers. They have also contacted the authorities and the President of the Personal Data Protection Office, as well as IT forensic specialists.
Important Update pic.twitter.com/PCEuhAJosR
— CD PROJEKT RED (@CDPROJEKTRED) February 9, 2021