CD Projekt Red source code breach: $7M dark web sale impacts Cyberpunk and Witcher franchises
The $7 Million Security Breach
In a shocking cybersecurity incident, hackers successfully extracted and sold proprietary game code from CD Projekt Red’s vaults. The digital heist netted approximately $7 million through underground channels, with the stolen assets including:
- Complete Cyberpunk 2077 source code
- The Witcher 3: Wild Hunt development files
- An unreleased raytracing-enhanced Witcher 3 build
- Thronebreaker: The Witcher Tales assets
Security analysts confirmed the transaction occurred through encrypted dark web platforms, bypassing the initially proposed public auction.
Timeline of the Attack
The breach unfolded through several critical phases:
- Initial Compromise (Early February): Hackers infiltrated CDPR’s Perforce servers
- Ransom Demand (Feb 9): Public threat to release code unless paid
- Private Sale (Feb 11): Underground transaction completed
- Gwent Leak: Separate release of card game assets
Cybersecurity firm Kela tracked the auction’s progression, noting the shift from public threats to private negotiations when a “satisfying offer” emerged from undisclosed buyers.
Technical and Business Fallout
Beyond the immediate financial impact, this breach presents multiple challenges:
| Risk Area | Potential Consequences |
|---|---|
| Code Integrity | Potential for pirated versions, cheat development |
| Employee Safety | Exposed HR documents create privacy concerns |
| Investor Confidence | Second major incident after Cyberpunk’s rocky launch |
Security researcher vx-underground verified the authenticity of leaked materials, while The Verge reported connections to the HelloKitty ransomware group.
Protecting Game Development Assets
For developers and studios concerned about similar attacks:
- Network Segmentation: Isolate critical code repositories
- Behavior Monitoring: Implement anomaly detection for source control systems
- Encryption: Protect sensitive documents with enterprise-grade solutions
- Incident Response: Prepare ransomware negotiation protocols
CDPR’s decision against paying the ransom, while principled, demonstrates the difficult choices companies face when intellectual property is compromised.
No reproduction without permission：SeeYouSoon Game Club » Cyberpunk 2077, The Witcher 3 source codes reportedly fetch $7m in dark web sale CD Projekt Red source code breach: $7M dark web sale impacts Cyberpunk and Witcher franchises