CD Projekt Red games source code sold in the dark web


You can also be interested in these:


Following up with the thread we started on the CD Projekt Red ransomware attack, ultimately, they didn’t negotiate with the hackers. Yesterday an auction was reportedly closed for the purchase of the company’s flagship games source code in the Dark Web. A “satisfying offer” was made externally from the forum they were using and the deal was closed. According to KELA, a dark web monitoring organism, the final price set for this transaction went up to 7 million dollars.



KELA provided The Verge what it seems to be legitimate information about the details of the transaction. A cyber security account vx-underground also confirmed the transaction was made. Moreover, in KELA’s twitted a few screenshots with the forum they used for this activity. It now states the auction was closed and the digital goods were successfully bought by an unidentified buyer.

According to Victoria Kivilevich, KELA’s intelligence analyst, the files sold included all CD Projekt Red stolen files. Multiple versions of the games Cyberpunk 2077, The Witcher 3 and Gwent, including source code, all packed in a single file. The end buyer identity or his purpose of acquiring those files are unknown.

Kivilevich gave IGN a translated copy of the XSS forum, from February 10, on which the purchase was finally done and confirmed. It was unclear the final price set for it, for reports indicate the transaction finally closed at 7 Million dollars. In order to participate in the auction there was a deposit participants had to be able to opt in for the files. The cost for this “deposit” was 1 million dollars, and it went up in increments of 500,000 dollars. The hacker group wasn’t kidding about this.

CD Projekt Red code sold

After this, vx-underground reported that segments of the code of the game Gwent had been released publicly. A feasible proof that the files were effectively sold. Cyber security experts point out the attack might have been caused by a hacker group called “HelloKitty”, based on the title and the redaction on the ransom note delivered to CD Projekt Red.

It is really unfortunate what CD Project Red have been experiencing since the launch of its game Cyberpunk 2077. Hit after hit, this company is embarked  in an inevitable downward spiral of mistakes and stubs. This event represents a serious problem for the company. They had, just for Cyberpunk 2077, a journey of 7 really long years, which they don’t seem to care. The company hasn’t commented anything yet.


More stories like this