Skip to main content
If you click on a link and make a purchase we may receive a small commission. Read our editorial policy.

Hackers claim to have sold Cyberpunk 2077, Witcher 3 source code

Group behind ransomware attack on CD Projekt took external offer after attempting to sell for $7 million

The data stolen from Cyberpunk 2077 developer CD Projekt Red has reportedly been sold.

Cyberintelligence firm Kela shared an image from the forums where the hackers were auctioning off the source code for several of the studio's games, in which the group claims to have accepted an offer for the compromised data.

The post states the auction is closed, adding: "An offer was received outside the forum that satisfied us. With the conditions of further non-distribution, in this regard, they were forced to withdraw the lot from sale [sic]."

According to an earlier post shared by vx-underground -- which collects malware source code, samples and papers -- the hackers claimed to be selling full source code for Cyberpunk 2077, Thronebreaker and The Witcher 3, including an unreleased version featuring raytracing.

The group was asking for a starting bid of $1 million, with a minimum offer increase of $500,000 or the option to purchase immediately for $7 million.

It is unclear how much money the hackers accepted.

Earlier this week, it was revealed CD Projekt Red had been the victim of a ransomware attack, with an "unidentified actor" claiming to have stolen the source code for the aforementioned games, as well as internal documents relating to accounting, legal, HR and more.

The hackers gave the studio 48 hours to contact them before it would auction off the data, but CD Projekt Red released a statement asserting that it would "not give in to the demands nor negotiate with the actor, being aware that this may eventually lead to the release of the compromised data."

The studio emphasised that the personal data of players has not been compromised. It is working with authorities to investigate the attack.

GamesIndustry.biz reached out to CD Projekt Red for comment, but was directed to the earlier statement.