Cyberpunk 2077 developer CD Projekt Red has been hit by a ransomware attack.
The developer released a statement earlier today, revealing that it has become "a victim of a targeted cyber attack" which saw an unauthorized actor accessing data within the company's internal network.
According to CD Projekt Red, the actor collected "certain data" belonging to the CD Projekt Red capital group and encrypted some devices within the company's network (which have been recovered through backups) and left behind a ransom note. You can check out the statement and the ransom note below:
Important Update pic.twitter.com/PCEuhAJosRFebruary 9, 2021
According to the ransom note, the unauthorized actors were able to access source codes for Cyberpunk 2077, Witcher 3, Gwent and the unreleased version of Witcher 3. In addition, they claimed to have gained access to "documents relating to accounting, administration, legal, HR, investor relations and more".
The ransom note goes on to say that if the hackers demands are not met (though the note does not specify these demands) then the data shall be sold or leaked online.
CD Projekt Red says in its statement that it "will not give in to the demands nor negotiate with the actor" even though it may mean the compromised data is leaked.
The statement also reassured fans that, to the best of CD Projekt Red's knowledge, no personal data of players or users had been breached - though the incident is still being investigated by authorities.
Continuous abuse
Since the rocky release of Cyberpunk 2077, CD Projekt Red has seen shares plumpet and its developers suffer tirades of online abuse from some players. The company offered refunds for Cyberpunk 2077 following the negative reception to the game's numerous bugs, which also saw the game pulled from the PlayStation Store.
This ransomware attack could potentially leak some of the team's personal data as well as detailed aspects of the company's inner workings.
CD Projekt Red is currently working with the "relevant authorities", which includes law enforcement, IT forensic specialists and the President of the Personal Data Protection Office, to investigate the matter.
