Cyberpunk 2077 developer CD Projekt Pink introduced that it has “turn into the sufferer of a focused cyberattack” that allegedly uncovered the supply code for a lot of of its video games.

In a message the developer shared on Twitter Tuesday morning, the hackers allege that they stole the intently guarded supply code for Cyberpunk 2077, Gwent, and The Witcher 3 (together with an unreleased prototype of the final). Paperwork “regarding accounting, administration, authorized, HR, traders relations and extra” had been additionally allegedly compromised.

Whereas the hackers apparently used ransomware software program to lock CDPR out of sure elements of its programs, the corporate says it ought to be capable of restore entry to the information via backups. The corporate additionally remained defiant within the face of a ransom demand of an unspecified quantity, saying it would not negotiate, regardless of a menace to launch the stolen knowledge. “We is not going to give in to the calls for nor negotiate with the actor, being conscious that this may occasionally ultimately result in the discharge of the compromised knowledge,” the corporate wrote. The demand got here with a 48-hour deadline.

CDPR says that “to one of the best of our data, the compromised programs didn’t comprise any private knowledge of our gamers or customers of our providers.” That units this attack other than a current ransomware attack in opposition to Capcom, by which Capcom retailer prospects, workers, and esports crew members had been among the many teams that will have had their private data revealed to hackers.

The uncooked supply code for a recreation, which is used to create the executable information distributed to gamers, is normally thought-about to be amongst a developer’s most dear commerce secrets and techniques. Again in 2003, the leak of supply code for Valve’s then-unreleased Half-Life 2 led to the arrest of a German hacker. Extra not too long ago, a big tranche of supply code for traditional Nintendo video games was launched on-line as a part of a so-called “Gigaleak.”

A current report by cybersecurity evaluation agency Coveware discovered that whole ransomware attack funds dipped barely within the fourth quarter of 2020, after rising steadily for years prior, as extra firms refuse to pay. An growing variety of these assaults now embody threats to leak knowledge on-line, Coveware discovered, and hackers usually launch that knowledge even after the specified ransom is paid.