CD Projekt Red has been having a tough time this year, with many incidents surrounding its games and the company itself. Not only were there problems with Cyberpunk 2077 that have harmed the company's reputation, but CD Projekt Red also suffered a massive data breach earlier this year.
In a Twitter post made to the official CD Projekt Red account, the company stated it has learned new information about the content that was stolen in the data breach. It seems that both source code for Cyberpunk 2077 and Witcher 3 has leaked online, as well as the personal information of previous and current employees.
The company stated that it can not release the exact type of content stolen or whether or not it has been tampered with after it was breached. However, CD Projekt Red is working hard with multiple different law enforcement agencies such as the General Police Headquarters of Poland, Interpol, and Europol to get the situation fixed as soon as possible.
To make sure something like this never happens again, the company has also listed out the steps it has taken to protect its internal systems further. These updates include redesigning the core IT infrastructure, installing next-generation firewalls and advanced anti-malware protection, and implementing a remote access solution. Additionally, CD Projekt Red has taken steps to limit the number of privileged accounts with access rights, improve event monitoring mechanisms, and expanded its Internal Security Department.
All of this has been in coordination with external cybersecurity and IT Specialists to protect its information in the best possible way. CD Projekt Red ended the update by stating that the company is committed to protecting the information of employees that was stolen and that it will take swift action against the parties responsible for the breach.
The CD Projekt Red Data Breach happened back in February, when hackers used ransomware and claimed to have taken data for some of the company's games, encrypted files of private documents such as NDAs and ID Documents, and payroll and benefits information of employees. All of this information was deleted from the servers, but the hackers left a note saying they made copies.
Back then, there wasn't exactly proof of the validity of the hacker's statement since there is no evidence of data being transferred out. Now it seems the company has a better idea of the information that is circulating on the internet and is taking the steps to amend the situation.