Hackers have reportedly sold the sport supply code and different data stolen from Cyberpunk 2077 and The Witcher 3 studio CD Projekt Red (CDPR). Cybersecurity agency Kela released screenshots of a put up on the hacking discussion board Exploit allegedly posted by the attackers, saying that they’ve obtained a proposal for the data from outdoors the discussion board. They added that they ended the public sale on the request of the customer. Cybersecurity Twitter account vx-underground subsequently confirmed that the public sale had closed.
On Tuesday, CDPR disclosed it had been the sufferer of a ransomware assault wherein hackers had collected “certain data” from the corporate. It posted a ransom notice from the hackers, wherein they claimed to have entry to supply code from the studio’s hottest video games, in addition to inner authorized, HR, and monetary paperwork. CDPR mentioned it could not give in to the calls for or negotiate with the hackers, even when that meant the stolen data would start circulating on-line.
“CD Projekt’s Red ransomed data has been leaked online,” the Twitter account vxunderground tweeted on Wednesday, along with a screenshot of folders that they said contained the source code for Gwent, a card game in the Witcher universe developed by CDPR.
Although the hackers have not been officially named, one security researcher told Wired he believed it involved the use of the HelloKitty ransomware, which had also been used to hack a Brazilian power company called CEMIG.
CDPR’s statement at the time said “We will not give in to the demands nor negotiate with the actor, being aware that this may eventually lead to the release of the compromised data.” The company added that the hackers had successfully encrypted some devices on CDPR’s network, but that the company had backups and begun restoring the data.
