CD Projekt Red says it was hacked but won't pay the ransom

the thing that might hurt them is if they are working on some unannounced games. for example way back when half-life 2 source got leaked there was also code for counter-strike and condition zero.

this allowed the public to piece together work that was incomplete and earlier than what the developers wanted.
 
the thing that might hurt them is if they are working on some unannounced games. for example way back when half-life 2 source got leaked there was also code for counter-strike and condition zero.

this allowed the public to piece together work that was incomplete and earlier than what the developers wanted.

In CDPR's case, they could potentially do this for upcoming Cyberpunk 2077 DLC, and possibly a Witcher 4 if there is one in development.
 
CDPR might have to shift to indie titles after this...CP2077 disaster launch, legal issues, hacked...will the next-gen console versions ever be released at this point?
 
CDPR might have to shift to indie titles after this...CP2077 disaster launch, legal issues, hacked...will the next-gen console versions ever be released at this point?
IIRC, the next-gen patches for consoles were delayed from early 2021 to 2H 2021.

I also wonder if anything from GOG was compromised since that is part of CDPR.
 
The bigger concern should be whether or not there is evidence that Polish labor laws were violated. If so, there could be hefty fines and or jail time for those responsible.
Would it even be allowed in court though? IANAL but in the US at least I am pretty sure you can't use illegally obtained data to make a case against anyone. You hack someone to get proof, everything you get is going to be thrown out and be inadmissible. You get a warrant to get the computers and even if they have to hack the machines to get at the data, that is legal and can be admissible in court.
 
Would it even be allowed in court though? IANAL but in the US at least I am pretty sure you can't use illegally obtained data to make a case against anyone.
It can be. A court may choose not to permit some evidence for various reasons, but how it's obtained only applies to the state. A police officer needs a warrant; there is no requirement for private parties, and also, no way for an individual or private entity to obtain warrants in the first place.
 
Would it even be allowed in court though? IANAL but in the US at least I am pretty sure you can't use illegally obtained data to make a case against anyone. You hack someone to get proof, everything you get is going to be thrown out and be inadmissible. You get a warrant to get the computers and even if they have to hack the machines to get at the data, that is legal and can be admissible in court.

It appears as if Poland specifically does not have a "fruit of the poisonous tree" law. So even evidence gained in illegal manners like this would be admissible in court.
 
CD Projekt Red hackers reportedly sold the 'Cyberpunk 2077' source code

The hackers behind this week's ransomware attack on Cyberpunk 2077 studio CD Projekt Red appear to have found a buyer for the stolen data...they ran an auction on a hacking forum but they shut it down after reportedly accepting an offer from elsewhere...the starting price for the auction was said to be $1 million and there was the option for an interested party with a spare $7 million to buy the data outright

It's not clear who has acquired the data, how much they paid for it or what they're planning to do with the information...

https://www.theverge.com/2021/2/11/...ack-cyberpunk-2077-the-witcher-3-auction-sale
 
Most of the time it is that employee clicking a phishing email, or that unpatched perimeter device that hasnt been touched in 10 years with any any firewall rules NAT'n to the network, more likely to be that.
The last one I cleaned up they got in through a side loaded phone app. Person placed the app on at home then connected it to the work network some time later, you would probably not be surprised how few institutions filter internal traffic. They may use passwords or some form of network authentication but full user, port, application ID, IP filtering on traffic between internal sources is somewhat rarer. But yeah that Samsung mapped and infected the network for weeks using that persons data plan for communication between the hackers and the phone then used the phones wifi to relay back to old printers, heating control devices, and eventually back to some Ubuntu servers and then it was game over for them.
 
let's see what happens after all the lawsuits and gov't inquiries

I think the takeaway is people shouldn't preorder if they plan to complain about it later if things go south. CDPR talked up their game too much, which isn't really new. Also I suspect when you chase the paper trail on this one, there are a ton of CDPR emails and conference calls discussing ways they were planning to deliver XYZ for launch. So they didn't actively want to screw anyone over, it just sort of happened.

Government and legal l actions aren't going to uncover much more than a video game company did video game company things.
 
Last edited:
I think the takeaway is people shouldn't preorder if they plan to complain about it later if things go south...

I didn't pre-order the game (because I was waiting to buy a 3080 first) yet still don't think CDPR handled things well at all...there was an article recently which went into more depth...the original Bloomberg article by respected journalist Jason Schreier is behind a paywall so this is from a secondary article...

https://www.pcgamer.com/cyberpunk-2077-staff-knew-how-bad-the-bugs-were-before-launch-confirms-report/#:~:text=Cyberpunk 2077-,Cyberpunk 2077 staff knew how bad,were before launch, report confirms&text=In that apology, Iwiński suggested,at the studio reject it.
 
It could be that CDPR bought the source code back using an intermediary so that doesn't make it look like they gave-in to the hackers.
 
CDPR may have activated an Asset.

Remember the scene from The Bourne TPS Report where they used that phrase "Activate the asset"? An assassin lying on a hotel bed with an ominously-packed bag nearby gets a beep on his phone. Picks up bag, and with no emotion, heads out the door.
 
I think the takeaway is people shouldn't preorder if they plan to complain about it later if things go south. CDPR talked up their game too much, which isn't really new. Also I suspect when you chase the paper trail on this one, there are a ton of CDPR emails and conference calls discussing ways they were planning to delivery XYZ for launch. So they didn't actively want to screw anyone over, it just sort of happened.

Government and legal l actions aren't going to uncover much more than a video game company did video game company things.
I agree. They may have overpromised but that's not abnormal for the video game industry, and many others. Hardly going to net any charges by a government.
 
I agree. They may have overpromised but that's not abnormal for the video game industry, and many others. Hardly going to net any charges by a government.
If people didn't sue for anything Molyneux made in the last 20 years - CP2077 should not register.

For PC and current-gen consoles, at least. The last ones, yikes.
 
let's see what happens after all the lawsuits and gov't inquiries

CDPR might have to shift to indie titles after this...CP2077 disaster launch, legal issues, hacked...will the next-gen console versions ever be released at this point?

I'm wondering why are you cheerleading so hard for their demise? This seems personal.
 
I'm wondering why are you cheerleading so hard for their demise? This seems personal.

where did I talk about their demise?...that's seems like your interpretation based on the internet mentality of everyone who doesn't give the game a 10 means they hate the game...a 7.5 score to you seems to mean pure hate...the game has a lot of issues, even on PC- even the developer has acknowledged it...the hotfixes and 1 major patch barely moved the needle...read the Bloomberg article for more Behind the Scenes info...it's going to take awhile to fix all the bugs and performance issues and for them to win back the trust of a lot of players
 
Last edited:
I wonder if game source code could potentially allow development of hacking tools targeting users with those games installed. Do any CDPR games request access to public networks when they initially run, for example?
 
where did I talk about their demise?...that's seems like your interpretation based on the internet mentality of everyone who doesn't give the game a 10 means they hate the game...a 7.5 score to you seems to mean pure hate...the game has a lot of issues, even on PC- even the developer has acknowledged it...the hotfixes and 1 major patch barely moved the needle...read the Bloomberg article for more Behind the Scenes info...it's going to take awhile to fix all the bugs and performance issues and for them to win back the trust of a lot of players

I'm surprised he commented like that. Seems to be the pot calling the kettle black in his case for having the white night view.
 
I wonder if game source code could potentially allow development of hacking tools targeting users with those games installed. Do any CDPR games request access to public networks when they initially run, for example?
Well they promised an online version of the game this year. So that will be a hacking cheating shitshow like most other pc games.
 
where did I talk about their demise?...that's seems like your interpretation based on the internet mentality of everyone who doesn't give the game a 10 means they hate the game...a 7.5 score to you seems to mean pure hate...the game has a lot of issues, even on PC- even the developer has acknowledged it...the hotfixes and 1 major patch barely moved the needle...read the Bloomberg article for more Behind the Scenes info...it's going to take awhile to fix all the bugs and performance issues and for them to win back the trust of a lot of players
Being relegated to making indie games would be their demise wouldn't it?
You have been constantly on their toe both in the game's topic and every news piece. Despite not even playing the game if I'm correct. For someone who has no stake in it you seem to be very keen on posting about everything that happens in a negative light. Expecting, even hoping for the worst. That's how you come across. I'm sorry but you seem like you wish them to fail.
 
Being relegated to making indie games would be their demise wouldn't it?
You have been constantly on their toe both in the game's topic and every news piece. Despite not even playing the game if I'm correct. For someone who has no stake in it you seem to be very keen on posting about everything that happens in a negative light. Expecting, even hoping for the worst. That's how you come across. I'm sorry but you seem like you wish them to fail.

I was waiting to get a 3080 before playing...I got a 3080 2 weeks ago...I do plan on playing it but that doesn't prevent me from reading about the game and its development...I'm not going to buy it until the game is in better shape- by that time it'll be cheaper as well...just because you finished the game in a buggy state doesn't mean I have to play it like that...I want a better gameplay and immersive experience on my first playthrough...I'm a fan of CDPR but it's OK to criticize a game or developer when they screw up

the game and developer have been making news for the wrong reasons ever since the game came out (not showing console footage, behind the scenes development issues, a lot of bugs, developer apologies etc)...the negative news cycle are just facts being reported which some like you don't want to hear or rationalize as fake news
 
Last edited:
Well they promised an online version of the game this year. So that will be a hacking cheating shitshow like most other pc games.
What if they made that part of the game?

<keanu-whoa.jpg>
 
  • Like
Reactions: MaZa
like this
That’s because they know that even if they pay the ransom there is absolutely no guarantee the information won’t be leaked/sold anyway. No point paying.

Generally, they do not release the data if you pay us - nobody would pay otherwise. It's a scummy business, but it's a business nevertheless. No guarantee, of course, but there's a reasonable chance your data is not released if you fork over the cash.

This is the more modern direction these attacks are taking. More and more places have good backups which makes recovery increasingly trivial. So instead, the threat has shifted to data exfiltration.
 
Well they promised an online version of the game this year. So that will be a hacking cheating shitshow like most other pc games.
It was said somewhere that the online game is using a different code base.
What if they made that part of the game?

<keanu-whoa.jpg>
whoa-1.gif
 
where did I talk about their demise?...that's seems like your interpretation based on the internet mentality of everyone who doesn't give the game a 10 means they hate the game...a 7.5 score to you seems to mean pure hate...the game has a lot of issues, even on PC- even the developer has acknowledged it...the hotfixes and 1 major patch barely moved the needle...read the Bloomberg article for more Behind the Scenes info...it's going to take awhile to fix all the bugs and performance issues and for them to win back the trust of a lot of players
Frankly, I think the public criticism of the game is more to do with the unmet promises and people getting overly excited than any bug issues. While I recognize there are bigger issues on consoles, on PC I really don't have any issues preventing me from playing and enjoying the game. It isn't perfect, but compared to a whole lot of games I've played in the past it certainly is far from the worst. Bugs? Yeah, occasionally but stuff I've also run across in multiple other AAA titles that don't get near the anger this one is getting. For me, it is no worse than their previous Witcher games. Had many of the same issues on those games that I've had in this one. I could list 20 different annoyances about gameplay decisions but I could do the same about every game I've played.

So, eh. Do I think they need to up their game? Yeah. But, frankly I think a lot of the anger directed at them right now comes more from people getting themselves so amped up for the game and then getting ... well ... a regular game. Part of the blame for that lies at the feet of CDPR, yes, but the gaming media and fans have a tendency to get themselves worked up as well independently of any hype from a studio. In this case we ended up with a perfect storm of gaming PR hype and media/fan generated hype and when they got a normal game people went nuts complaining.
 
Blaming fans for being upset is kinda lame... their feelings are valid. Now, if they all pre-ordered the game or bought it blindly, they have no right to complain that they didn't get what they expected. That's what reviews are for folks, so y'all get no sympathy from me as you just helped enable the devs
 
Blaming fans for being upset is kinda lame... their feelings are valid. Now, if they all pre-ordered the game or bought it blindly, they have no right to complain that they didn't get what they expected. That's what reviews are for folks, so y'all get no sympathy from me as you just helped enable the devs
Well, that's sort of the point. The video game industry is chock full of unmet promises from devs. None of the media or long-time game players are so naive that they should be shocked by a promise that wasn't kept. But, sometimes they do get a little over-excited and it spins out of control and all of a sudden you get a lot of people who're upset because something didn't meet their expectations. There were so many people raving about this game early on just based on demos. Most of them were huge CDPR fans from the Witcher games and they expected something amazing. I just recall seeing so many youtube videos and articles absolutely gushing over every press release and trailer that I knew back then that a lot of those people would end up disappointed. Not a shock that a lot of the people who were gushing hard back then are now angry at CDPR.
 
There were so many people raving about this game early on just based on demos. Most of them were huge CDPR fans from the Witcher games and they expected something amazing. I just recall seeing so many youtube videos and articles absolutely gushing over every press release and trailer that I knew back then that a lot of those people would end up disappointed. Not a shock that a lot of the people who were gushing hard back then are now angry at CDPR.

I still remember that first Teaser...

 
Well, that's sort of the point. The video game industry is chock full of unmet promises from devs.
Someday maybe I'll stop being surprised that people keep pre-ordering buggy games from the same publishers and then being outraged that they wind up with another buggy game from the and publishers again.
 
Someday maybe I'll stop being surprised that people keep pre-ordering buggy games from the same publishers and then being outraged that they wind up with another buggy game from the and publishers again.
I only play Bethesda titles for the glitches, otherwise they are just... games.
 
Someday maybe I'll stop being surprised that people keep pre-ordering buggy games from the same publishers and then being outraged that they wind up with another buggy game from the and publishers again.
Yep. While other people's mileage may vary, I haven't seen any more bugs than I did in any of their previous titles. Also, Skyrim as an example had far more bugs for me than Cyberpunk has had and got nowhere near the same bad press.
 
Yep. While other people's mileage may vary, I haven't seen any more bugs than I did in any of their previous titles. Also, Skyrim as an example had far more bugs for me than Cyberpunk has had and got nowhere near the same bad press.

Bug level seamed about the same for me.

Skyrim was announced a year before it came out and didn't have any delays. And it actually worked on the consoles it came out on.

Cyberpunk had ridiculous hype for years and tons of delays. I ignored the hype so I don't know what kind of broken promises they had, but some things just seem unfinished in the game, like the police system.

I think Cyberpunk is a great game, but I played on an extremely high end PC. Millions of people play on consoles and are extremely disappointed.
 
Back
Top