Friday, February 12th 2021

CD Projekt Red Hack: Red Engine, Multiple Games' Source Code Sold by Hackers

As if CD Projekt Red needed any more problems on their plate that weren't of their own creation, it seems that the hackers who recently infiltrated the company's infrastructure have turned out a profit on sensitive data. After source code for CD Projekt Red's Red Engine, Cyberpunk 2077, The Witcher 3, and Gwent were stolen from the company's servers, the company announced they had gone to the relevant authorities, and that they wouldn't negotiate with the data terrorists. Now, according to Cybersecurity company Kela, the hackers have de-listed their auction for the data - after requiring a starting bid of $1 million, and expecting $7 million for the entire package.

The deal apparently went through, with a condition that bars the hackers from re-selling the data to any other parties. It remains to be seen whether or not the thieves will abide by their word and the conditions reportedly set upon the sale. Of course, it is in the realm of possibility that CD Projekt Red themselves acquired the data anonymously so as to protect their corporate and technology interests - one can only imagine the repercussions of the company's efforts being exposed this way. And despite any ill sentiment that can be levied at the company for the state of Cyberpunk 2077's last-gen versions, I'd say that respect for the company's developers and team should have us all on their side on this one.
Sources: Kela @ Twitter, via TechSpot
Add your own comment

64 Comments on CD Projekt Red Hack: Red Engine, Multiple Games' Source Code Sold by Hackers

#51
AusWolf
BzucoCorrect me if I am wrong, hackers in CP77 incident is just third subject. First subject is cdpr management, the second is customers(especialy PS4 customers).
In your pizza story 1. sub. is pizza owner and 2. sub. is customer who bought pizza and is not satisfied. Why did you merge 2. and 3. subject together in pizza story??? Doesn't make sense and this is where people masivelly failing.

Do you have any evidence, that several CDPR customers are behind hackers attack? ;)
Maybe I worded it wrong, but I didn't merge them together. ;) The fact that you are dissatisfied with a product doesn't justify someone else hacking the company and stealing their intellectual property. My entire point is what you just said: if 1. is the owner, 2. is the customer and 3. is the hacker, then the relationship between 1 and 2 has absolutely nothing to do with 3's actions. Their statement of doing what they're doing because people are dissatisfied is a load of BS - just like regular people taking the hackers' side on the matter is a load of BS too.
Posted on Reply
#52
Bzuco
@AusWolf
I do not own the product. OK, you just worded it wrong, it is just coincidence on forums :D :p

I'm only here to point out that a lot of people have their heads full of hacker's attack and real crime is slowly disappearing from people's consciousness. Real cdpr crime I mean something like "to mislead a person for the purpose of enrichment"...I think every country have that § in criminal law.
I hope that the internal investigation for consumer protection in Poland and the two lawsuits of investors will not be swept off the table by some simple trick, because cdpr's crime from my perspective is bigger than the stealing of data two months later after release CP. I am not law expert, but I am sure that total sum of acquired moneys from crime, the number of people affected, duration of the crime, ...is considering in every crime.
If the hackers attack happened one or two days after CP release, I will never write this post. But the attack happened(if it is not fake) after start investigation in Poland, after investors.., after Iwinski's statement from 13.1.2021(too late). So it is something new in game industry. I am accepting all kind of scenarios except one, that everything will be forgotted and crime will be overlooked(on one of / or on both sides).
Posted on Reply
#53
Athlonite
AusWolfIf you order pizza, and it ends up being not very tasty, do you go and rob the pizza place?
That's a pretty daft analogy a better one would be if you ordered a Pizza with everything on it and what you got was nothing but a base with cheese and cockroaches on it in which case you'd definitely be asking for your money back (or pitchforks and burning torches)
Posted on Reply
#54
AusWolf
AthloniteThat's a pretty daft analogy a better one would be if you ordered a Pizza with everything on it and what you got was nothing but a base with cheese and cockroaches on it in which case you'd definitely be asking for your money back (or pitchforks and burning torches)
That's exactly the point. Asking for your money back is a genuine and honest thing to do. Robbing the pizza place is not. ;)
Bzuco@AusWolf
I do not own the product. OK, you just worded it wrong, it is just coincidence on forums :D :p

I'm only here to point out that a lot of people have their heads full of hacker's attack and real crime is slowly disappearing from people's consciousness. Real cdpr crime I mean something like "to mislead a person for the purpose of enrichment"...I think every country have that § in criminal law.
I hope that the internal investigation for consumer protection in Poland and the two lawsuits of investors will not be swept off the table by some simple trick, because cdpr's crime from my perspective is bigger than the stealing of data two months later after release CP. I am not law expert, but I am sure that total sum of acquired moneys from crime, the number of people affected, duration of the crime, ...is considering in every crime.
If the hackers attack happened one or two days after CP release, I will never write this post. But the attack happened(if it is not fake) after start investigation in Poland, after investors.., after Iwinski's statement from 13.1.2021(too late). So it is something new in game industry. I am accepting all kind of scenarios except one, that everything will be forgotted and crime will be overlooked(on one of / or on both sides).
Don't get me wrong, I'm not saying that CDPR is completely innocent in every matter and their "misleading information" should be forgotten. I'm only saying that hacking them and stealing their intellectual property isn't the right way to communicate what's wrong. Not to mention the profit the hackers are (potentially) making out of it. They're surely not doing what they're doing out of public interest. If they were, they would distribute their profits among those who couldn't get a refund for CP77. That's clearly not happening.

Nothing should be overlooked, but everything should be treated as separate matters, and not events that led to one another. CDPR released a half-done game. That's wrong. Then some hackers stole property for personal profit. That's just as wrong.
Posted on Reply
#55
Athlonite
AusWolfThat's exactly the point. Asking for your money back is a genuine and honest thing to do. Robbing the pizza place is not. ;)
Well if you want to leave important stuff on an insecure server connected to the internet then you're asking for trouble and well the rest is history It wouldn't surprise me if we find out it was all hoax to deflect from the shitshow that is CP2077
Posted on Reply
#56
lexluthermiester
ZoneDymoThe bugs and glitches is actually not the issues, its the complete lack of content.
Have you actually PLAYED the game?
Posted on Reply
#57
milewski1015
lexluthermiesterHave you actually PLAYED the game?
This. I agree that the players on last-gen consoles were wronged with the sub-par quality. I agree that CDPR played a role in overhyping the game and what it was. But to say there isn't any content there is just not true. The main problem (aside from the last-gen console stuff) in my opinion was that the game was marketed as this super massive open world game - something akin to a cyberpunk-themed GTA, when it's more of a cyberpunk-themed Witcher game. The main story is decent - a bit short, but satisfactory. The skill trees provide for some solid replayability. The side quests provide hours and hours of content and are where the game shines in my opinion. Yes, it gets kind of same-y in places (cyberpsycho attacks for example), but so was TW3 (monster contracts - track the monster, apply the proper blade oil/potions, kill). The supporting character quest lines (Judy, River, Panam, Kerry, Claire, etc) are all well written and are well worth the time spent going through them. My first playthrough (all side quests/organized crime activities) provided me with 140 hours of playtime. I started up a second character and have planned out what build I'd like to do, but am taking a little break before hopping back in. Maybe I've been happy with it in part because I didn't really pay a lot of attention to the trailers and all that marketing that led people astray. Yes, the game needs work, and I firmly believe that CDPR will put it in. But to say that it's $60 worth of nothing couldn't be further from the truth.
Posted on Reply
#58
Mussels
Freshwater Moderator
Theres a lot of main quest content, its the oddities outside of those that shows the lack of polish

Things like the barely present NPC AI, police AI. They dont affect the main story really, but they're constantly rubbed in your face.
Posted on Reply
#59
milewski1015
MusselsTheres a lot of main quest content, its the oddities outside of those that shows the lack of polish

Things like the barely present NPC AI, police AI. They dont affect the main story really, but they're constantly rubbed in your face.
Agree about the NPC and police AI. Maybe I feel like the main story was short because I put it off for so long. I blew threw Act 1 pretty quick, got maybe halfway(?) through Act 2, and then put the main quest on the back burner and wiped the map clean before heading back to it. Don't really have any idea what the ratio of main quest to side content is out of my 140 hour playtime. Anyway, my point was stressing that there is plenty of content to be had - I think the hours I logged for a single playthrough proves that.
Posted on Reply
#60
AltCapwn
milewski1015Agree about the NPC and police AI. Maybe I feel like the main story was short because I put it off for so long. I blew threw Act 1 pretty quick, got maybe halfway(?) through Act 2, and then put the main quest on the back burner and wiped the map clean before heading back to it. Don't really have any idea what the ratio of main quest to side content is out of my 140 hour playtime. Anyway, my point was stressing that there is plenty of content to be had - I think the hours I logged for a single playthrough proves that.
Played 96hours on my first playthrough, already at 40 on my second and I still find new stuff lol.

But yeah, you can see that some side quest, like the one with the clown and a "grenade nose", isn't 100% done. It's like you go get the dude, go to a spot, kill some people, and it's done. I'm sure there was more to be had, even more based on the phone conversation where he's searching for the best of the best, just to go from point A to B lol...
Posted on Reply
#61
Athlonite
MusselsTheres a lot of main quest content, its the oddities outside of those that shows the lack of polish

Things like the barely present NPC AI, police AI. They dont affect the main story really, but they're constantly rubbed in your face.
also no level scaling of enemies at all so when you get to like level 20 or so every enemy becomes a low level threat and no fun to kill as it's way to easy
Posted on Reply
#62
bug
Athlonitealso no level scaling of enemies at all so when you get to like level 20 or so every enemy becomes a low level threat and no fun to kill as it's way to easy
I always found level scaling to be counterintuitive.

There's a sense of accomplishment in, say Gothic, when you finally defeat an enemy that has been ripping you to shreds since forever. In contrast, in Oblivion, it was actually counter-productive to level-up past a certain point, because you didn't get any stronger once you maxed out your skills, but the enemies did. I think there were tutorials floating around about how to finish the game at clvl2 (iirc, there was one quest that you couldn't complete without gaining one level).
Posted on Reply
#63
milewski1015
altcapwnSpoiler: Unfinished side quest
Yeah, that one was pretty noticeable to me as well. He does pop up for another side quest later - he becomes a fistfight opponent if you're progressing through that line of quests
Posted on Reply
Add your own comment
Mar 30th, 2025 11:29 EDT change timezone

New Forum Posts

Popular Reviews

Controversial News Posts