Security News > 2021 > June > CD Projekt: Data stolen in ransomware attack now circulating online
CD Projekt is warning today that internal data stolen during their February ransomware attack is circulating on the Internet.
In February, CD Projekt suffered a ransomware attack that allowed threat actors to steal source code and business data before encrypting devices.
In a new statement published today, CD Projekt said they have learned that this stolen data is now being circulated and may include employee and contractor details.
"We are not yet able to confirm the exact contents of the data in question, though we believe it may include current/former employee and contractor details in addition to data related to our games. Furthermore, we cannot confirm whether or not the data involved may have been manipulated or tampered with following the breach," said CD Projekt in a new security breach update.
Another threat actor group is known as PayLoad Bin, previously known as Babuk Locker, had recently published what they claim is the full source code for CD Projekt games, consisting of 364GB of data.
The HelloKitty ransomware gang claimed to have sold CD Projekt's data in February, and it's unclear how this different threat group obtained it.
News URL
Related news
- New 'Helldown' Ransomware Variant Expands Attacks to VMware and Linux Systems (source)
- Five backup lessons learned from the UnitedHealth ransomware attack (source)
- Mega US healthcare payments network restores system 9 months after ransomware attack (source)
- SafePay ransomware gang claims Microlise attack that disrupted prison van tracking (source)
- Blue Yonder ransomware attack disrupts grocery store supply chain (source)
- Starbucks, grocery stores impacted by Blue Yonder ransomware attack (source)
- VPN vulnerabilities, weak credentials fuel ransomware attacks (source)
- Bologna FC confirms data breach after RansomHub ransomware attack (source)
- Vodka maker Stoli files for bankruptcy in US after ransomware attack (source)
- Romanian energy supplier Electrica hit by ransomware attack (source)