CD Projekt Red says it was hacked but won’t pay the ransom

CD Projekt Red doesn’t seem to be having a good start to 2021, with multiple lawsuits hanging over their head and scrutiny of the Polish government, the company is in a vulnerable position. Now, the company tweeted out saying that it’s been hacked and some of its internal systems have been compromised.

In a tweet yesterday, CDPR released a statement where it informed players and those using its services about the cyberattack and safety of its data. According to the company, an unidentified actor had gained unauthorized access to its internal network and was able to salvage certain data that belongs to the CD Projekt Capital Group. The hacker also left a ransom note saying “the content will be released in the public” if their demands aren’t met. 

The company said that it “..will not give in to the demands nor negotiate with the actor, being aware that this may eventually lead to the release of the compromised data”. CDPR confirms that although some of its network devices have been encrypted, all of its backups remain intact and safe. The company has already secured its IT infrastructure and restored services, while the data is being restored in the background. 

The company also attached the Ransom Note left by the hacker where it is mentioned that they were able to salvage the source code of Witcher 3, Cyberpunk 2077, Gwent, and an unreleased version of Witcher 3. Plus they were also able to get some internal documents containing information related to accounting, HR, investors, and more. While the cyberattack looks serious, the company has assured its users that all their data is safe and no personal details were compromised. 

The company is still investigating the extent of the attack and has already informed law enforcement and Data Protection Office about the ordeal.