Just two days following a ransomware attack on The Witcher developer CD Projekt Red, their assets have begun to leak online. On Monday, CD Projekt Red announced that a hacker group had dumped full copies of Cyberpunk 2077, The Witcher 3, Gwent, and an unreleased version of The Witcher 3. They also claimed to have access to "documents related to accounting, administration, legal, HR, investor relations and more." However, CD Projekt Red stated they were unwilling to give in to their demands, and the leaks have reportedly already begun.
According to the Twitter page for vx-underground, a self-described "collection of malware source code, samples, and papers," the source code for Gwent, a card game in the Witcher universe, has been leaked online. While links are being taken down quickly, journalists from Motherboard, Vice Magazine's technology division, were reportedly able to download a copy and verify its authenticity. They claim the download is larger than a legitimate Gwent download, has assets pertaining to several different versions of Gwent, and has "what appear to be Testframework files, software game developers use to test applications." Also according to Motherboard, a note reading "next release is tomorrow" was in the download folder, as well.
It appears that the hackers have not given up on getting money out of this, yet, however. In a follow-up Tweet, vx-underground claims that the hackers will be auctioning off the source code for Cyberpunk 2077 and The Witcher 3, with a starting bid of $1,000 USD, on the Exploit forums, a popular hacking website. It is unclear if the Witcher 3 source code they are referring to is the unreleased version alluded to in the note from the initial attack, or if it the officially released version.
The sharing of stolen, copyrighted material is illegal and, thus, against the site's rules. Please do not ask for illegal files. Please do not post illegal files. Please do not share links to sites that host illegal warez. Failure to adhere will result in account suspensions or permanent bans.
CD Projekt Red's ransomed data has been leaked online. pic.twitter.com/T4Zzqfn78F— vx-underground (@vxunderground) February 10, 2021
It was originally reported by vx-underground that the opening bid for the Witcher 3 and Cyberpunk source code would $1000 USD. This was apparently a typo, and the opening bid will instead be $1,000,000 USD. They will also sell immediately for $7,000,000 USD.
Update: a mistake was made. They stated starting bid $1kk. This was assumed as a typo for $1,000. They meant $1,000,000. They are also selling immediately for $7,000,000.— vx-underground (@vxunderground) February 10, 2021
Attached images supplied by @DrFurfagMD pic.twitter.com/JnOcwnGqZk