The hackers who stole source code for Cyberpunk 2077, The Witcher 3, and Gwent from CD Projekt’s servers have successfully managed to sell it for an undisclosed sum.
CD Projekt posted a statement on Tuesday explaining how the company’s internal network had been breached and data stolen. A ransom note was left by the hackers demanding some sort of agreement (read: payment) was required within 48 hours or the source code would be sold. CD Projekt responded by stating it had no intention of negotiating, and so yesterday the hackers started an auction in a Russian hacking forum on the dark web.
As IGN reports, the auction has since been closed because a “satisfying offer” was received by the hackers from someone outside of the forum. In return for payment, the buyer apparently stipulated that the source code not be sold again or distributed. If true, it suggests the buyer is either keen not to have CD Projekt’s source code shared publicly because they are supportive of the company, or they want to keep it for themselves for malicious reasons.
When the auction started, the opening bid was set at $1 million and the option to buy immediately was offered for $7 million. As the auction was closed, it suggests someone was willing to pay that $7 million asking price, or they had something even better to offer. We may never know the details of the deal done and the final amount paid.
We still know very little about who carried out the server hack and what their motivation was. However, according to a tweet by Fabian Wosar who works for security vendor Emsisoft, the ransom note left on the server suggests it is the work of ransomware group “HelloKitty.”
