9 February 2021

Cyberpunk 2077 maker falls victim to a ransomware attack


Cyberpunk 2077 maker falls victim to a ransomware attack

CD Projekt Red, a company behind widely popular games like Cyberpunk 2077 and The Witcher, says it was target of a cyber attack during which a malicious actor gained access to the company’s internal network, encrypted some of devices and “collected certain data belonging to CD Project.”

In a tweet disclosing the security incident, the company shared a ransomware note left by the attackers, who claim to have stolen full copies of the source codes from a Perforce server for Cyberpunk 2077, The Witcher 3, Gwent, and the unreleased version of The Witcher 3. The intruders are threatening to release the source code alongside internal legal, HR, and financial documents if the company fails to meet the hackers’ demands.

“We will not give in to the demands nor negotiate with the actor, being aware that this may eventually lead to the release of the compromised data,” CD Projekt Red wrote in response. The company added that although some devices in its network have been encrypted, “our backups remain intact,” and it has secured its IT infrastructure and started restoring data.

CD Projekt Red also added that the compromised system did not contain any personal data of players or users of the company’s services.

Back to the list

Latest Posts

Cyber Security Week in Review: April 19, 2024

Cyber Security Week in Review: April 19, 2024

In brief: the LabHost PhaaS platform shut down, Russian military hackers attacked critical infrastructure in the US and Europe, and more.
19 April 2024
Ukrainian military personnel targeted via messaging apps and dating sites

Ukrainian military personnel targeted via messaging apps and dating sites

The threat actor employs a range of software in their malicious activities, including both commercial programs and  open-source tools.
18 April 2024
Russian military hackers targeted US water utilities and hydroelectric facilities in Europe

Russian military hackers targeted US water utilities and hydroelectric facilities in Europe

This marks the first time Russian nation-state hackers have posed a direct threat to critical infrastructure in Western countries.
18 April 2024