Earlier this week, we learned that CD Projekt Red has been hacked, with the attackers obtaining the source code for Cyberpunk 2077, The Witcher 3 and GWENT alongside other documents. Now, it seems that some of CDPR's data has been sold off in an auction.
Cybersecurity firm, KELA, monitored the situation on the dark web, posting screenshots of the auction and then confirming it being closed:
Just in: #CDProjektRed AUCTION IS CLOSED. #Hackers auctioned off stolen source code for the #RedEngine and #CDPR game releases, and have just announced that a satisfying offer from outside the forum was received, with the condition of no further distribution or selling. pic.twitter.com/4Z2zoZlkV6
— KELA (@Intel_by_KELA) February 11, 2021
This means that CD Projekt Red's game source code and possibly other information will likely begin circulating soon, possibly leaking to the surface web at some point. In fact, this process may already have begun, as the hackers released the GWENT source code earlier this week in an effort to apply pressure to CD Projekt.
CD Projekt Red became aware of a cyber attack on its systems this week. The company immediately informed the public on Tuesday morning, while also sharing the ransom note the attackers left behind. At the time, CD Projekt Red said it had no plans to pay any ransom or co-operate with the attackers.
KitGuru Says: CD Projekt Red hasn't commented further on the leaks or breach since revealing the attack. With how things are progressing though, we'd expect to hear more soon.