CD Projekt RED Hacked, Attacker Claims to Have "Cyberpunk 2077" and "The Witcher 3" Source Code

[btarunr]

CD Projekt RED just announced that it has been hit by a cyber-attack on its internal network, with the attacker having gained access to certain sensitive information belonging to the CD Projekt group. In a press note posted to Twitter, the studio included the screenshot to a plain-text ransom note left on its servers by the attacker, who claims to possess source-code of the company's most popular titles, including "Cyberpunk 2077," "The Witcher 3: Wild Hunt," "Gwent," and an unreleased version of "The Witcher 3" (possibly a remaster). They also claim to have confidential documents related to CDPR's financial accounting, administration, legal, HR, IR, and more. The note ends with information on how to reach out to the attacker to discuss ransom within 48 hours. CDPR announced that it will not give into the demands of the attacker, and has reached out to law enforcement.



View at TechPowerUp Main Site

 

[Caring1]

Inside job.

 

[Vayra86]

What a world we live in

 

[ratirt]

The world is collapsing.

 

[ZoneDymo]

honestly that notepad message is pretty hilarious

 

[thegnome]

Honestly, not suprising with how dissapointing the 2077 launch went. Someone's bound to go overboard, inside or outside, to hack them.

 

[Tsukiyomi91]

definitely an inside job. Not to say it's not a surprise but I don't think anyone outside of the company would do this for free or has the know-how of where the sensitive files are located.

 

[DeathtoGnomes]

Inside job.

Disgruntled Employee

 

[the54thvoid]

Disgruntled Employee

The ones most easily caught.

 

[AsRock]

The ones most easily caught.

Aye it's like did the wife do it when the husband goes missing or visa versa just to make everyone happy HAHAHA.

 

[Max(IT)]

Good ! Now maybe someone could fix that mess

 

[Verpal]

Our contacts in gaming journalism

Well at least we know there are good chance the assailant doesn't speaks English natively.

 

[W1zzard]

Good ! Now maybe someone could fix that mess

What I wanted to post

 

[1d10t]

Maybe it's just angry costumer whom had nonrefundable physical disc.

 

[Valantar]

Honestly, not suprising with how dissapointing the 2077 launch went. Someone's bound to go overboard, inside or outside, to hack them.

Perhaps not surprising, but it's pretty damn depressing that an expected response to "someone made a game with lots of bugs" is "someone broke into their servers, stole all their files, and is now blackmailing them". The internet version of justice is very, very messed up.

 

[Dredi]

Finally proper modding tools!

 

[BSim500]

Perhaps not surprising, but it's pretty damn depressing that an expected response to "someone made a game with lots of bugs" is "someone broke into their servers, stole all their files, and is now blackmailing them".

Well, attempted blackmail. It's bad they got hacked but +1 to CDPR for actually having functional offline backups and not paying a ransom. If everyone did this, this dumb Bitcoin ransomware problem would be solved already. (And yeah, looking at what the modding community has done with many other games, aside from bug fixing they might even finish off the missing AI code, add a Linux port, etc...)

 

[Chomiq]

Heh, someone from our company just announced they will be planning a security audit.

 

[Night]

Perhaps not surprising, but it's pretty damn depressing that an expected response to "someone made a game with lots of bugs" is "someone broke into their servers, stole all their files, and is now blackmailing them". The internet version of justice is very, very messed up.

Wasn't the game postponed 2 times in order to be "polished"? Then they release that. IMO this wouldn't have happened if the game wasn't that hyped from the start, there wouldn't be so many mixed feelings. This is basically a great example why I never pre-order anything. Though, I think this is an inside job.

Well, attempted blackmail. It's bad they got hacked but +1 to CDPR for actually having functional offline backups and not paying a ransom.

They'd still have to pay the ransom for the game source codes not getting to the public, and there's always no guarantee.

 

[Valantar]

Well, attempted blackmail. It's bad they got hacked but +1 to CDPR for actually having functional offline backups and not paying a ransom. If everyone did this, this dumb Bitcoin ransomware problem would be solved already. (And yeah, looking at what the modding community has done with many other games, aside from bug fixing they might even finish off the missing AI code, add a Linux port, etc...)

Sorry, but what is "attempted blackmail"? The crime is already fully committed once the threat of "pay us or we do X" is presented. Whether or not the target acquiesces is irrelevant.

But yeah, it does show how crucial secure offline backups are. Not having them is just gambling that nobody will find a reason to attack you, which ... well, given how flimsy that reasoning is shown to be time and time again, is a really poor wager.

Wasn't the game postponed 2 times in order to be "polished"? Then they release that. IMO this wouldn't have happened if the game wasn't that hyped from the start, there wouldn't be so many mixed feelings. This is basically a great example why I never pre-order anything. Though, I think this is an inside job.

Are you joking? Again, this is what you are arguing is somehow reasonable.
Problem: Someone released a buggy game.
"Solution": Hack and blackmail them.

Whether or not the game was postponed for fixes is entirely irrelevant to how absurd this reasoning is.

Is CDPR alone responsible for the hype? Obviously not - rabid TW3 fans are clearly just as guilty. And "mixed feelings"? If you have mixed feelings towards someone, do you go over to their house and steal their things? This is precisely the kind of absurd logic I was pointing out.

I mean, it's pretty absurd that I apparently have to say this, but: Making a bad game is not a crime, nor anything worthy of any type of punishment. That obviously doesn't mean they deserve our time, money or sympathy either. Ignoring them and moving on (until they fix the game) is the only reasonable response. I get being excited and hyped for something new to come along, but if your reaction to those expectations not being met is to think "blackmail is kinda reasonable", then you've gone way, way off the deep end.

 

[Caring1]

Should have posted the hackers contact details so people can PWN them.

 

[bug]

Perforce, that's a blast from the past... It partly explains the dev difficulties over there.

 

[Kapone33]

Honestly, not suprising with how dissapointing the 2077 launch went. Someone's bound to go overboard, inside or outside, to hack them.

That is an interesting opinion.

 

[Demigod001]

Ah its Half life 2 all over again. I wonder if this hacker will be as stupid as the valve hacker was

That Time A German Hacker Leaked Half-Life 2's Source Code

Players have been waiting a while for Valve to release another Half-Life game. It’s taken long enough that it’s easy to forget all the drama that circled Half-Life 2’s development. You know, like a hacker leaking an early version of the game in September 2003, more than a year ahead of its...

kotaku.com

 

[Night]

Problem: Someone released a buggy game.
"Solution": Hack and blackmail them.

Whether or not the game was postponed for fixes is entirely irrelevant to how absurd this reasoning is.

It's clear that the motive in the text file is big unsatisfaction with the game/company which most likely caused this, at no point did I say that's alright to do. Hatred can be a better motivator than money in my opinion.