The source code of Witcher 3 and Cyberpunk 2077 has reportedly been successfully auctioned to an as yet unknown party. Two days ago the source code of card game Gwent leaked online, the source code for the other games was put up for auction. It now seems to be closed.
Stolen data from game developer CD Projekt Red that was looted in a ransomware attack last week has appeared online and was auctioned. That reports datasecurity-platform vx-underground op Twitter. At first it seemed to be only the source code of the card game Gwent, but that turned out to be a teaser. Source codes from The Witcher 3, Thronebreaker and Cyberpunk 2077, plus alleged internal documents from CD Projekt Red appeared in an online auction not much later. According to vx-underground, that auction has been successfully completed and the source code of both games has been sold.
With the announcement of the ransomware attack CD Projekt Red showed a threatening letter stating that the attackers had looted source code for Cyberpunk 2077, Witcher 3, Gwent and the unreleased version of The Witcher 3. The attackers also write that CD Project Red has 48 hours to respond to the attack. The Polish company has indicated that it will not negotiate with the attackers or pay a ransom.
Now it appears that the attackers subsequently offered the source code by auction on a hacker forum. In images that vx-underground shares on Twitter is some of Gwent’s leaked source code to see and a screenshot of the auction. The starting bid of the auction was one million dollars, for 7 million dollars the data could be bought immediately. Not much later meldde vx-underground that the auction was closed because a deal was closed outside the auction. It is unknown who bought the data and what this person wants to do with the data. It is also not known for how much the data was ultimately purchased. Sales has been confirmed by KELA, a security company that specializes in monitoring the darknet.