CD Projekt acknowledges stolen data is being circulated online

Shutterstock

CD Projekt, the developer at the rear of games these types of as Cyberpunk 2077 and The Witcher series, has confirmed that firm information obtained throughout a ransomware attack earlier this calendar year is remaining circulated on-line.

In February, the developer had a portion of its interior systems compromised, with hackers from the ‘HelloKitty’ group acquiring corporation data as well as encrypting a amount of developer devices.

✔ Approved Seller From Our Partners

Protect your privacy by Mullvad VPN. Mullvad VPN is one of the famous brands in the security and privacy world. With Mullvad VPN you will not even be asked for your email address. No log policy, no data from you will be saved. Get your license key now from the official distributor of Mullvad with discount: SerialCart® (Limited Offer).

➤ Get Mullvad VPN with 12% Discount

A month afterwards, the stolen details, which includes accounting, administration, authorized, HR, and investor relations data, was currently being auctioned off in a Dark Web “charity fundraising” celebration organised by the hackers.

On Thursday, CD Projekt issued a statement stating that it had “learned new facts about the breach”, foremost the corporation “to think that inside info illegally attained all through the attack is presently remaining circulated on the Internet”. 

“We are not however capable to confirm the correct contents of the knowledge in dilemma, though we feel it could include things like present-day/previous staff and contractor information in addition to knowledge linked to our game titles. Also, we can not validate whether or not or not the facts included may perhaps have been manipulated or tampered with following the breach,” the developer declared, adding that it really is “committed and organized to acquire motion against parties sharing the facts in question”:

“We would also like to condition that — irrespective of the authenticity of the data remaining circulated — we will do anything in our power to secure the privacy of our personnel, as perfectly as all other involved parties.”

Worldwide law enforcement agencies Interpol and Europol have been contacted by the Warsaw-dependent business, which is also cooperating with Poland’s Standard Police Headquarters as very well as multiple exterior cyber security & IT specialists.

CD Projekt also declared that it had “taken a number of measures to safe and harden [its] interior systems”, in get to prevent similar incidents in the upcoming. The developer has rolled out a new, redesigned main IT infrastructure, executed subsequent-technology firewalls with superior anti-malware security, employed a new remote-entry remedy, and expanded its interior security section.

Additionally, the business has limited the amount of accounts that keep ‘privileged’ obtain rights, set up a new system for endpoints, servers, and networks defense, when also enhancing its occasion-monitoring strategy.