CD Projekt, the developer behind games such as Cyberpunk 2077 and The Witcher, has fallen victim to a cyber attack that saw hackers access its internal network and threaten to leak sensitive data.
The Polish games company confirmed on Twitter that a portion of its internal systems had been compromised, with hackers obtaining company data as well as encrypting a number of developer devices.
In a ransom note shared by the company, the hackers claimed to have accessed source code for games including Cyberpunk 2077, Gwent, and an unreleased version of The Witcher 3, and threatened to leak it unless a payment was made.
They also managed to obtain documents containing accounting, administration, legal, HR, and investor relations information.
A CD Projekt spokesperson told IT Pro that they are not able to provide further information on the impact of the attack on future game development or the sum requested in the ransom. However, the company made it clear that they were not intending to give in to the hackers' demands.
“We will not give in the demands nor negotiate with the actor, being aware that this may eventually lead to the release of the compromised data,” it said, noting that it is still investigating the attack and has “already approached the relevant authorities, including law enforcement and the President of the Personal Data Protection Office", which is the Polish equivalent of the ICO.
RELATED RESOURCE
In the statement, CD Projekt added that it has secured its “IT infrastructure and begun restoring the data” from backups and that no customer data was impacted by the attack.
ESET cybersecurity specialist Jake Moore said that it seems as if CD Projekt had “the correct protocol in place to withstand such demands and upheaval”.
“All good businesses have critical redundancies in place to mitigate the risk and this can only be truly simulated by testing the backups regularly and red teaming the company. We, unfortunately, live in a world where very little remains untouchable but the forward-thinking decision-makers understand this risk and spend money and time in reducing the impact,” he added.
The attack on CD Projekt comes after three other major gaming developers were targeted in the last few months. Ubisoft and Crytek were hit by the Egregor ransomware gang in October 2020, while Capcom fell victim to the Ragnar Locker group a month later.
-
Using DeepSeek at work is like ‘printing out and handing over your confidential information’News Thinking of using DeepSeek at work? Think again. Cybersecurity experts have warned you're putting your enterprise at huge risk.
-
Can cyber group takedowns last?ITPro Podcast Threat groups can recover from website takeovers or rebrand for new activity – but each successful sting provides researchers with valuable data
-
Average ransom payment doubles in a single quarterNews Targeted social engineering and data exfiltration have become the biggest tactics as three major ransomware groups dominate
-
BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new groupNews The notorious gang has seen its servers taken down and bitcoin seized, but may have morphed into a new group called Chaos
-
Google cyber researchers were tracking the ShinyHunters group’s Salesforce attacks – then realized they’d also fallen victimNews In an update to an investigation on the ShinyHunters group, Google revealed it had also been affected
-
Nearly one-third of ransomware victims are hit multiple times, even after paying hackersNews Many ransomware victims are being hit more than once, largely thanks to fragmented security tactics
-
75% of UK business leaders are willing to risk criminal penalties to pay ransomsNews A ransom payment ban is a great idea - until you're the one being targeted...
-
The Scattered Spider ransomware group is infiltrating Slack and Microsoft Teams to target vulnerable employeesNews The group is using new ransomware variants and new social engineering techniques - including sneaking into corporate teleconferences
-
Hackers breached a 158 year old company by guessing an employee password – experts say it’s a ‘pertinent reminder’ of the devastating impact of cyber crimeNews A Panorama documentary exposed hackers' techniques and talked to the teams trying to tackle them
-
The ransomware boom shows no signs of letting up – and these groups are causing the most chaos
News Thousands of ransomware cases have already been posted on the dark web this year
