Security News > 2021 > June > CD Projekt: Data stolen in ransomware attack now circulating online

CD Projekt: Data stolen in ransomware attack now circulating online
2021-06-10 21:57

CD Projekt is warning today that internal data stolen during their February ransomware attack is circulating on the Internet.

In February, CD Projekt suffered a ransomware attack that allowed threat actors to steal source code and business data before encrypting devices.

In a new statement published today, CD Projekt said they have learned that this stolen data is now being circulated and may include employee and contractor details.

"We are not yet able to confirm the exact contents of the data in question, though we believe it may include current/former employee and contractor details in addition to data related to our games. Furthermore, we cannot confirm whether or not the data involved may have been manipulated or tampered with following the breach," said CD Projekt in a new security breach update.

Another threat actor group is known as PayLoad Bin, previously known as Babuk Locker, had recently published what they claim is the full source code for CD Projekt games, consisting of 364GB of data.

The HelloKitty ransomware gang claimed to have sold CD Projekt's data in February, and it's unclear how this different threat group obtained it.


News URL

https://www.bleepingcomputer.com/news/security/cd-projekt-data-stolen-in-ransomware-attack-now-circulating-online/