Update:
Following the hack, an unreleased version of The Witcher 3 as well as source code for Cyberpunk 2077 and Gwent are up for auction online.
According to Tom's Hardware, the source code has been shared online on EXPLOIT forums at a starting bid of $1,000 dollars (as per @vxunderground). At the time of writing, Tom's Hardware note that the files were hosted on several locations including Mega and 4Chan, but they have been removed.
This is the source code to 'Gwent' card game. Witcher 3, CyberPunk 2077, etc is being auctioned today on EXPLOIT forums at a starting bid of $1,000USD.The ransomware authors said they will not be auctioning data anywhere else - any other location other than EXPLOIT is fake.
— vx-underground (@vxunderground)
February 10, 2021
Original Story Follows:
Developer CD Projekt Red has suffered a data breach, following unauthorised access from "an unidentified actor", the company revealed on Twitter.
The hack allegedly allowed access to the source code of Cyberpunk 2077, The Witcher 3, Gwent, and an unreleased version of The Witcher 3.
Read More: Cyberpunk 2077 Review: The More You Want, The Less You Get
CD Projekt Red Hacked, Game Source Codes Held To Ransom
CDPR's official statement explains that "yesterday we discovered that we have become a victim of a targeted cyberattack, due to which some of our internal systems have been compromised."
"An unidentified actor gained unauthorized access to our internal network, collected certain data belonging to CD PROJEKT capital group, and left a ransom note the content of which we release to the public."
"Although some devices in our network have been encrypted, our backups remain intact" the studio confirms, before noting that they refuse to negotiate with the responsible party.
The developer also confirms that, to the best of its knowledge, the data compromised did not include any personal information of customers or users.
As for the ransom, it alleges that the actor has gained information on "accounting, administration, legal, HR investor relations and more"
If contact is not made, the ransom notes that source codes will be "sold or leaked online" and that "documents will be sent to our contacts in gaming journalism".
We'll do our best to update this constantly developing story.
Meanwhile, CD Projekt Red is insistent on defending itself against another lawsuit, while there have been reports that some refunds have been given while players can still have access to the game.