CD Projekt announced that the hackers "gained unauthorized access to our internal network, collected certain data belonging to CD PROJEKT capital group, and left a ransom note the content of which we release to the public." In the ransom note, the hackers state that they stole the "FULL copies of the source codes from your Perforce server for Cyberpunk 2077, Witcher 3, Gwent and the unreleased version of Witcher 3."
The hackers go on to state that they gained access to and copied "all" of CD PROJEKT's documents relating to "accounting, administration, legal, HR, investor relations and more!"
The ransom note ends with the hackers telling CD PROJEKT that they have 48 hours to contact them, or they will leak the games' source codes and all stolen documents online.
If this information is accurate, a hack of this magnitude could essentially cripple CD PROJEKT.
In the announcement from CD PROJEKT, they mentioned that they have "already secured [thier] IT infrastructure and [have] begun restoring the data." They go on to state that they will "not give in to the demands nor negotiate with the actor," knowing full well that the data stolen may be leaked online.
CD PROJEKT is currently preparing to mitigate any consequences that this decision may result in. They also confirmed that the compromised systems did not contain any personal data of players or users of their services to the best of their knowledge.
CD PROJEKT has already been dealing with the rocky launch of Cyberpunk 2077. This cyberattack only adds to the list of class action lawsuits and complaints from players about the new game.