GameSpot may receive revenue from affiliate and advertising partnerships for sharing this content and from purchases through links.

CD Projekt Uses DMCA Takedowns To Slow Spread Of Stolen Code

The company was recently hacked and its stolen source code for several games was put up for auction.

42 Comments

CD Projekt Red is taking some quick steps to stop the spread of its games' source code, particularly via social media. The company had game code stolen and allegedly sold off as part of a hack earlier this month, and the company is doing everything in its power to prevent the code for games like Cyberpunk 2077 and The Witcher 3 from spreading online. One strategy it's using is serving DMCA notices to those trying to share the code online. It remains to be seen how effective this strategy will be.

According to Vice, on Thursday, February 18, two different Twitter users were notified of a DMCA takedown related to sharing code for the card game Gwent. At least one of the tweets in question contained a link to the game's source code.

The hackers left a ransom note after committing the attack against CD Projekt, but the company said it wasn't going to give in to these demands when it initially shared the news, knowing the data could be released if it didn't agree.

The note itself said four different projects' source code was stolen, including the aforementioned three games as well as an unreleased version of The Witcher 3. Other administrative data was stolen, as well. Plenty were quick to jump in with jokes about how the interface for hacking in Cyberpunk 2077 made this all possible.

CD Projekt Red continues working on updates to improve Cyberpunk 2077, as its public image took a huge hit in December when the game released in a borderline-broken state. The game was even pulled from sale on PlayStation Store, and refund programs were enacted for unhappy customers. True next-gen versions are planned for later this year, and there is also a multiplayer experience on the way.

Got a news tip or want to contact us directly? Email news@gamespot.com

Join the conversation
There are 42 comments about this story
42 Comments  RefreshSorted By 
GameSpot has a zero tolerance policy when it comes to toxic conduct in comments. Any abusive, racist, sexist, threatening, bullying, vulgar, and otherwise objectionable behavior will result in moderation and/or account termination. Please keep your discussion civil.

Avatar image for fud_sang
Fud_Sang

528

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

Could some group of people take this source code and say...fix the game if they had the ability and inclination?

Cuz they should do that.

4 • 
Avatar image for naija
Naija

121

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

It's a real shame CD Projekt Red didn't seem to have an issue when it was them who was hacking and pirating other companies' games, burning them onto CDs and then selling them on the Black Market. Come on, CDPR! Don't be such hypocrites. So these guys are freely sharing your Gwent codel. It's not like they're making any money off it. Hell, not even YOU made any money from Gwent Online!!

Upvote • 
Avatar image for Vojtass
Vojtass

2756

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@naija: There was no CD Projekt RED, when Kiciński and Iwiński have been selling games on Grzybowska St. Don't lie.

2 • 
Avatar image for naija
Naija

121

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

@Vojtass: They are the founders of CDPR. They named their company once they realized they couldn't continue pirating games as the East was soon following the West in creating and enforcing copyright laws. They began legit business by acquiring licenses to do vocalizations for various games such as Baldur's Gate and that's when they came up with CDPR but at its core, it's always been those two at the helm. And they've admitted publicly in several interviews that they used to pirate and sell other people's games as their own. Sorry but where the hell did I lie? They brought their pirate mentality to CDPR when they founded the company and still conduct business in very shady ways.

2 • 
Avatar image for Vojtass
Vojtass

2756

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Vojtass

@naija: First of all CD Projekt RED was founded in 2002. It has nothing to do with CD Projekt sp. z o.o. which was registered in 1994 as a distributor of computer games in Poland. Both companies belong to the same group, but they always have had different tasks. Michał Kiciński and Marcin Iwiński weren't cracking games, because they didn't have any programming skills. They were students at high school selling stuff they got elsewhere, often imported from Western countries. They were selling games on Grzybowska St. in Warsaw, basically marketplace in temporarily rented school building, to this day real cultural phenomenon. It wasn't just a place where you could buy new games, you could buy there computers, bootleg consoles, gamepads, disc drives, home made joysticks, tuned up tape recorders etc. You could met there interesting people, who later became important figures in software/hardware business. Many journalists were buying computer games on Grzybowska St., because there were no official distributors in Poland. Back then there was no software copyright law in Poland (it was enacted in 1994). "Bajtek" (The Little Byte) - the only computer magazine in Poland - was even the official media partner of Grzybowska st. Market. Atari and ZX Spectrum games were even broadcasted via official Scaut Radio Station. Grzybowska St. Market was a breath of freedom in a country behind Iron Curtain where officially home computers were available only in state owned stores called Pewex (Atari 800 XL cost more than 75% of average wage); Grzybowska was expanding even more in the early 90's - during transition from communism to capitalism. CD Projekt Sp z o.o. has been legit business from the very start, not based on cracking and selling pirated stuff. Most important fact is that CD Projekt Sp. z o.o. has ENORMOUS merits in decreasing computer games piracy in Poland. I'm not able to stress enough how much good they done in this area. Those merits are so huge that at some point of time, CDP Sp z o.o. had almost all major distribution licenses (e.g. EA, Blizzard, BioWare, THQ, Atari, Ubisoft etc.) and games were selling very well. It was CDP who was releasing games translated into Polish on regular basis; it was CDP who significantly decreased prices and CDP who was preparing fantastic collectors editions unavailable in other countries. I still have over 60 games releaseed by CDP, some of them in those big a$$ cardboard boxes.

Saying that CDPR started as a bunch of pirates, and they are hypocrates, is a straight lie and shows that you simply have no clue about this topic. Nobody ever did more in decreasing games piracy in Poland - and CDP achieved it via consumer friendly policy, not by sending police or going to court.

2 • 
Avatar image for deactivated-64efdf49333c4
deactivated-64efdf49333c4

21783

Forum Posts

0

Wiki Points

0

Followers

Reviews: 36

User Lists: 0

@naija: Will post a link to his/her YouTube channel in 3...2...1...

Upvote • 
Avatar image for Bamda
Bamda

924

Forum Posts

0

Wiki Points

0

Followers

Reviews: 15

User Lists: 0

@naija: Its not funny supporting criminal behavior! You are one disgusting animal!

2 • 
Avatar image for locke90
locke90

874

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

@naija: you got proof of that or are you talking out of your rear.

Upvote • 
Avatar image for fend_oblivion
fend_oblivion

6760

Forum Posts

0

Wiki Points

0

Followers

Reviews: 2

User Lists: 0

@locke90: Think he's referring to this article :

https://www.eurogamer.net/articles/2013-11-06-seeing-red-the-story-of-cd-projekt

Upvote • 
Avatar image for mogan
mogan

19991

Forum Posts

0

Wiki Points

0

Followers

Reviews: 6

User Lists: 0

mogan  Moderator

@naija: Can you cite your sources on that one?

3 • 
Avatar image for fend_oblivion
fend_oblivion

6760

Forum Posts

0

Wiki Points

0

Followers

Reviews: 2

User Lists: 0

@mogan:I think he is talking about this :

https://www.eurogamer.net/articles/2013-11-06-seeing-red-the-story-of-cd-projekt

"Funnily enough," Iwiński adds, "especially in Poland, I was many times asked, 'Oh, so you were a pirate - your roots are from the computer games market?' I say, 'Hey, for starters it wasn't illegal and second, look at a lot of the presidents or the founders or the key shareholders of IT companies in Poland now: who are these guys?' These are the guys learning the ropes at the computer markets as well."

2 • 
Avatar image for locke90
locke90

874

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

@mogan: im not too sure but he could be talking about GOG.

Upvote • 
Avatar image for mogan
mogan

19991

Forum Posts

0

Wiki Points

0

Followers

Reviews: 6

User Lists: 0

Edited By mogan  Moderator

@locke90: Was GoG ever "hacking and pirating other company's games? That'd be a new one to me.

2 • 
Avatar image for rafiozzo
rafiozzo

26

Forum Posts

0

Wiki Points

0

Followers

Reviews: 3

User Lists: 0

@mogan: No, not GoG. Iwiński before CD Projekt was dealing games on software marketplace when in Poland there was not copyrights yet. So he and his buddy traded pirate games.

"CD Projekt started on the software exchange in Warsaw. At a time when Poland had not heard about copyrights yet, a bazaar of new technologies was built in the center of the capital. Unfortunately, they were new only in name, because games and equipment that had already gained popularity in the West were brought to Warsaw. For the country leaving the commune, however, it was a breath of freshness and a look into the future, which provided some of them with entertainment unavailable in the People's Republic of Poland, and with the other an opportunity to earn good money."

You can read about this here: https://spidersweb.pl/bizblog/cd-projekt-red-historia-keanu-reeves/

(unfortunately this article is in Polish, so you must put this link into google translator).

The knowledge that the founders of CD Projekt traded pirate games is widely known in Poland. Maybe as a penance and a form of compensation, years later they decided to set up GOG - a platform where you can buy DRM-free games.

2 • 
Avatar image for mogan
mogan

19991

Forum Posts

0

Wiki Points

0

Followers

Reviews: 6

User Lists: 0

mogan  Moderator

@rafiozzo: @fend_oblivion: Thanks for that info, guys. Those were actually pretty interesting reads.

2 • 
Avatar image for asnakeneverdies
asnakeneverdies

3765

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@mogan: Well, yeah, that's literally what they do, Mogan.

Upvote • 
Avatar image for deactivated-64a3ced8b46b8
deactivated-64a3ced8b46b8

5977

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 10

@naija: "It's a real shame CD Projekt Red didn't seem to have an issue when it was them who was hacking and pirating other companies' games".

I'm unaware of what you're referring to. What happened?

2 • 
Avatar image for naija
Naija

121

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

@thecupidstunts: Read the replies and links posted above. The fact that they used to pirate and sell other people's games back when it wasn't technically illegal does not absolve them of the fact that they were perfectly fine with ripping off other people's work and profiting from it and got away with it because no one had any laws on the books just then. Wrong is wrong and they knew they were stealing. So now it's pretty ironic of them to cry foul when someone does someone illegal against them because that's how they got their start in the business. I just have absolutely no respect whatsoever for any of them.

2 • 
Avatar image for deactivated-64a3ced8b46b8
deactivated-64a3ced8b46b8

5977

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 10

@naija: Yeah, that was some pretty interesting info . Thanks for the response. ✌

Upvote • 
Avatar image for fud_sang
Fud_Sang

528

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

The wolves are somehow STILL at their door.

2 • 
Avatar image for gleencross
GleenCross

1112

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

I really want to see cd projekt burning in hell, they deserve the bankruptcy... but, besides this "hate" (I really felt betrayed in a way, lol they manipulated the consumers and investors), I read about the potential issues of this code... Cd Projekt wants to release a multiplayer mode of Cyberpunk (they have no shame), but if the source code is out there in the internet that opens the possibilities of cheats. So, the players will not only have a awful multiplayer mode developed by complete amateurs, there will also be cheaters at day 1. So there it goes the multiplayer and the extra income, it serves them right.

Upvote • 
Avatar image for Vojtass
Vojtass

2756

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@gleencross said:

I really want to see cd projekt burning in hell, they deserve the bankruptcy...

You're so cool.

Upvote • 
Avatar image for naija
Naija

121

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

@gleencross: Cyberpunk's multiplayer is not being developed in-house. They tried to do it for over two years and got nowhere with it. They outsourced it to Digital Scapes who has been working on it for two years themselves and they're also going through hell with it. It won't likely see the light of day until 2023 or later IF they can ever get it to work.

Even then, it will be a standalone game that will be sold separately with ties to but not incorporated into the base game.

3 • 
Avatar image for gleencross
GleenCross

1112

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

Edited By GleenCross

@naija: I read about how the multiplayer will obviously share the same assets and resources from the "main" engine. If the code is compromised, in theory it will be possible to develop exploits and cheats even more easily than usual. So, if a game like Battlefield can be exploited by hackers even if they don't actually have access to the source code... imagine if they do have the code? That's the point, the multiplayer is not even out of the oven and we can expect hacks already, the image of cd projekt is tainted yet again

Upvote • 
Avatar image for naija
Naija

121

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

@gleencross said:

@naija: I read about how the multiplayer will obviously share the same assets and resources from the "main" engine. If the code is compromised, in theory it will be possible to develop exploits and cheats even more easily than usual. So, if a game like Battlefield can be exploited by hackers even if they don't actually have access to the source code... imagine if they do have the code? That's the point, the multiplayer is not even out of the oven and we can expect hacks already, the image of cd projekt is tainted yet again

That code hasn't been compromised. This current action by CDPR is only in regard to the leaked portion of code for Gwent Online -- a game which has been CDPR's biggest failure to date. And the leaked material were only assets for the game. AFAIK, only that initial leak was made with the promise that more was to follow the next day but it was never done so it's just those assets which really don't amount to much at all.

I still question whether the whole thing was real in the first place. CDPR has been crying wolf for several years now about getting hacked, first on their official forums, then several times on their main servers. This is the first time they'd published the ransom note which many found quite oddd, its wording seeming more like some hacker-wannabe than the rather well-known group they've pretty much assumed it to be. I've yet to see any concrete proof that it was them too so I keep coming back to my original doubt.

CDPR has been caught in so many lies over the years. They can't seem to secure a damn thing that's vital to their operations. They continue to demonstrate just how amateurish they are in nearly every regard to their business operations. Why should we believe this was real? The only leaked material was for some assets for their least popular and least successful venture. The 48-hour didn't even get a chance to take a single bid before it was canceled. Their refusal to pay any ransom is suspect since presumably the hackers accepted a private offer outside of the auction to settle matters and, conveniently, the terms were that no other offers could be made or accepted and the material would not be leaked publicly.

Still sounds like CDPR staged this whole thing themselves. They hired a few modders a few years ago to work on Cyberpunk. Who's to say they didn't hire a few hackers as well, some old friend perhaps. They could have easily helped them to stage the whole thing. For what reason? For sympathy. To stall for time since their game continues to be a flaming train wreck now with the ghost of Adam Smasher roaming the game haunting the player. They'll need a hell of a lot more time than their extremely vague road map suggested in order to fix the game and this entire charade would serve to buy them some of that time.

Upvote • 
Avatar image for Cryptics
Cryptics

131

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Cryptics

@gleencross: So you want to see 100s of people lose there jobs? even tho they had nothing to do with the inner workings of the company? Also not sure why you believe they would go bankrupt as Cyberpunk was still a success and they made profit from it.

4 • 
Avatar image for naija
Naija

121

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

@Cryptics: They're under contract. They won't be staying once those contracts are up anyway. None of the devs who worked on the three Witcher games are still there. Do you think it's a paradise working for CDPR? Ask anyone who lives in Poland if their dream job would be to work at CDPR and they'll give you a resounding "hell no!"

And CDPR is still work billions, as in around $7b at last count. They won't be going bankrupt any time soon. Doesn't mean they won't fire most of those 800+ devs whenever they wish. They've already been throwing most of them under the bus blaming them for the state of the game.

Upvote • 
Avatar image for gleencross
GleenCross

1112

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

@Cryptics: Who cares, we are not talking about bus drivers. Coders, programmers, designers, etc.. they can easily find another job. In fact, following the reports that Cd Projekt pays lower wages than usual, it could be beneficial for them to change companies. The point is not about being politically correct, I mentioned how cd projekt manipulated both the audience and investors. This is not debatable, just look at any promotional video before the actual release of the product, it is literal false advertisement. I don't know about you, but imo a company who goes that far in the dirty side of business, they deserve to bankrupt (and yes, I know this outcome is not probable)

2 • 
Avatar image for ZeroMissionCat
ZeroMissionCat

65

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@gleencross: My dude, I think you need to go outside and step away from the screen for a while.

8 • 
Avatar image for Oldgun
Oldgun

394

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@ZeroMissionCat: Well put mate, it's people like these promoting cancel culture. Imbeciles...

Upvote • 
Avatar image for gleencross
GleenCross

1112

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

@ZeroMissionCat: wtf are you even talking about?

Upvote • 
Avatar image for Vojtass
Vojtass

2756

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@gleencross: That you're, most likely, out of your mind.

2 • 
Avatar image for howlingfantod
HowlingFantod

157

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

So...what exactly do people do with this code? I'm not tech savvy enough to understand how development code is valuable in the hands of regular people.

2 • 
Avatar image for cosmos_chaos
Cosmos_Chaos

1

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

@howlingfantod: The source code is for the owner/ administrator over the entire project/ producing the finished product, its the holy grail; the blueprints, keys to the castle. small projects are assigned and handed around the development team, some are art concepts for a developer, others do lines of code as a programmer or debugging. none of the team has the whole game due to potential leaks

2 • 
Avatar image for titan6669
titan6669

39

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@howlingfantod:From my understanding the code isn't useful at all to anybody. In theory it could be used to develop exploits or to reverse engineer the engine or the games but it would be such an overwhelmingly ridiculous amount of work that it's actually faster and easier to create that stuff without the source code.

3 • 
Avatar image for asnakeneverdies
asnakeneverdies

3765

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@titan6669: No need to reverse engineer the game when you've got the source code, Titan. You set up a development environment and you can compile the executables, provided you have all the dependencies.

Upvote • 
Avatar image for naija
Naija

121

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

@titan6669: It's not as if Gwent Online was ever successful so what's the big deal here? It's made no money at all for CDPR. Thronebreaker did very poorly both on GoG and on Steam. Each of the tournaments sponsored by CDPR were so poorly organized, no one in the media even bothered to cover them.

Since the assets (not the full code) from Gwent Online was the only thing that was actually leaked by the "hackers" and I'm still not 100% convinced it wasn't CDPR themselves who staged this elaborate ruse in the first place, who the hell really cares? Those assets aren't worth anything. The entire code for Gwent Online is worthless. It's a money loser for them, has been from the start and continues to fail to this day. It's not even supported on consoles anymore since 2019.

Upvote • 
Avatar image for Vojtass
Vojtass

2756

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@naija: If Gwent was unprofitable, it would be scrapped long time ago like CDP did with The Witcher Battle Arena. Thronebreaker wasn't bestseller for sure but it still made a profit.

Upvote • 
Avatar image for naija
Naija

121

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

@Vojtass: They ceased support for the consoles for Gwent Online back in 2019. It only marginally is still supported by a skeletal staff at present. It is not profitable at all for them. And no, Thronebreaker was not profitable at all.

Their initial plan was to sell it exclusively on GoG for several months, so they'd maximize their profits but after only 8 days of abysmal sales, it turned up on Steam where it also failed to sell.

Why? Because many players got angry at the fact that the single player campaign was supposed to be part of the free online game but when CDPR realized their tournaments to bring attention to the game was a bust and players simply were not buying those kegs as expected, their plans changed.

They expanded the campaign, added a ton of filler content and slapped a price tag of $30 to it and figured they'd make their money that way. Angry customers did not agree which is why the only content that was leaked was that of Gwent Online, the only materials that would create the least harm for them if leaked and since I still believe it was CDPR who staged this whole thing, they knew those leaked assets would be the least threat to their game. Even if someone managed to find some way to make some use of them, it could hardly hurt them since they'd made no money from Gwent Online at all.

Upvote • 
Avatar image for Vojtass
Vojtass

2756

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@naija: What is your source about Thronebreaker incomes? There's huge difference between selling low numbers and selling low and still making profit.

Besides how could leak be staged? Why? For sympathy? You got to be kidding. Do you know how harmful for whole company is a leak like this? CDP Group is listed on Warsaw Stock Exchange and all their moves are closely followed by investors. Data leak was a reason why share price dropped. Again. Most important thing is that CDPG executives could be prosecuted for such activity. Management guys did quite a few stupid things but not THAT stupid.

Upvote •