CD Projekt has released a statement explaining it’s been the victim of a “targeted cyber attack,” with some of its internal systems compromised.
On Twitter the company explained an unidentified actor had breached its systems and collected data belonging to CD Projekt, and was now threatening to release the contents. CD Projekt said some of its devices had been encrypted by the attack, but that company backups remain intact and it is in the process of restoring its data.
Unusually, CD Projekt also released a copy of the ransom note sent by the unidentified actor. They claim to have gained access to “the source codes from [CD Projekt’s] Perforce server for Cyberpunk 2077, Witcher 3, Gwent and the unreleased version of Witcher 3”. They also claim to have gained access to “all of [CD Projekt’s] documents relating to accounting, administration, legal, HR, investor relations and more,” although the exact nature of these isn’t detailed. The note demands CD Projekt contact the sender, or face the public release of the source codes and documents.
