CD Projekt’s Source Codes and Internal Data Stolen as Result of Hacker Attack

This summary addresses two distinct events involving CD Projekt RED, spanning from 2021 to 2026. The primary focus is on the company’s operational security and the commercial performance of its flagship intellectual property, The Witcher 3.

In February 2021, CD Projekt RED suffered a significant cybersecurity breach. Unauthorized actors gained access to the company’s internal network, stealing source codes for Cyberpunk 2077, Gwent, and an unreleased version of The Witcher 3, alongside sensitive administrative, HR, and investor relations documentation. The attackers attempted to extort the company, threatening to leak or sell the data if their demands were not met. CD Projekt RED refused to negotiate, opting instead to engage law enforcement, data protection authorities, and IT forensic specialists. The company confirmed that no personal user data was compromised during the incident.

By September 2026, the narrative shifted to the commercial success of The Witcher 3: Wild Hunt Remastered. Analysts from Erste Securities Polska projected that the updated title would generate between 100 million and 125 million zloty (approximately $26 million to $32.5 million) by the end of 2026. Despite being offered as a free upgrade to existing owners, the remaster was expected to drive significant revenue through new player acquisition, with forecasts estimating 3 million units sold within the final quarter of 2026. This optimism was supported by immediate market performance, as the game achieved a new peak of over 113,000 concurrent players on Steam shortly after its release, surpassing previous records set during the launch of the Netflix series adaptation.