Makers of Cyberpunk 2077 game hit by ransomware hack | Games
The company behind troubled gaming blockbuster Cyberpunk 2077 has been hit by a ransomware attack, it has said.
In a post to its Twitter feed on Tuesday, CD Projekt, the Polish developers, shared the ransom note left by the hackers, who claimed to have copied the source code for a number of the studio’s biggest games including Cyberpunk and The Witcher 3, as well as encrypted the servers themselves.
“Although some devices in our network have been encrypted, our backups remain intact,” the company said in a statement. “We have already secured our IT infrastructure and begun restoring data.
“We will not give in to the demands nor negotiate with the actor, being aware that his may eventually lead to the release of the compromised data. We are taking necessary steps to mitigate the consequences of such a release, in particular by approaching any parties that may be affected due to the breach.”
The company said it had confirmed that no player data was stored on the compromised systems. But, according to the ransom note, personnel data was stolen. “Your [sic] have been EPICALLY pwned!!,” the hackers wrote, according to the note released by CD Projekt.
“We have dumped FULL copies of the source codes from your Perforce server for Cyberpunk 2077, Witcher 3, Gwent and the unreleased version of Witcher 3!!!
“We have also dumped all of your documents relating to accounting, administration, legal, HR, investor relations and more!”
The attack is emblematic of a growing trend from criminal hackers, who supplement traditional ransomware with a new tactic, sometimes called “doxware”. Conventional ransomware simply encrypts servers, locking up data, and demands a fee for the key; but with the growth of the malware class, companies such as CD Projekt are increasingly likely to maintain access to timely and easy-to-restore backups. “Doxware” involves stealing the data itself, and demanding payment in exchange for not publishing it on the web.
The tactic has had mixed success. Cybersecurity experts strongly recommend against paying the blackmail, since, unlike with ransomware, there is no way of ensuring that the attackers won’t simply demand more money down the line.
Cyberpunk 2077, the latest game from CD Projekt, released to mixed reviews in December, due to severe technical flaws on older consoles and several game-breaking bugs. The game involves hackers called netrunners breaking in to the servers of mega-corporations, bypassing their “Ice” – technological defences – to steal or destroy data for profit or politics.