CD Projekt RED announced today that a hacker has managed to penetrate its servers and accessed data that could be related to released and unreleased games. According to the message left by the hacker, files accessed include source code for Cyberpunk 2077, The Witcher 3, Gwent, and an unreleased version of Witcher 3 (perhaps the remastered edition). Access to accounting, administrative, legal and investor relations information is also mentioned.
The compromised computer is a Perforce server for data exchange and version control between a company. CD Projekt does not confirm what was stored on this server, but has already confirmed that the data will be restored. The hacker encrypted the files and demanded to be contacted, probably for a ransom. If the company does not reach an agreement within 48 hours, the hacker threatens to sell or disclose all the information to the public, including the source code of the titles mentioned.
CD PROJEKT RED has not been having a good time since the release of Cyberpunk 2077. While patch 1.1 has already been released (with hotfix 1.12 for the PC version), the second promised patch is expected for the month of February in order to continue fixing bugs and improving the performance of some specific platforms. Definitely, the cyber attack incident could not have come at a worse time. Someone probably made a mistake out of desperation to manipulate or update data on the servers for future Cyberpunk 2077 updates.
“We have already reached out to the relevant authorities, including law enforcement and the President of the Office for Personal Data Protection, as well as IT forensic specialists, and will cooperate closely with them to fully investigate the incident.”