In February, Cyberpunk 2077 and Witcher developer CD Projekt Red reported that it had suffered a significant data breach, and that the cyber attackers had issued a ransom note for the stolen information. The company has issued an update, saying that it now believes all or part of that data is “currently being circulated on the Internet” and that it may include sensitive employee data.
As most gaming eyeballs were glued to the Summer Game Fest, CD Projekt tweeted the update, which remains vague on specifics, but warns that the data stolen in the breach likely contains “current/former employee and contractor details in addition to data related to our games.” The RPG game publisher says it cannot confirm whether or not this data has been altered by the thieves, but that it’s now apparently being made available on the internet.
“Currently, we are working together with an extensive network of appropriate services, experts, and law enforcement agencies,” CD Projekt writes. These include authorities at Poland’s General Police Headquarters, Interpol, and Europol. The company says it has also updated the president of the Personal Data Protection Office in Poland.