The attacker gained access to a treasure trove of corporate data. According to the ransom note, which was made public by CD Projekt RED, the hacker downloaded all documents relating to accounting, administration, legal, HR, investor relations, and more.
Furthermore, a Perforce server containing source code for Cyberpunk 2077, Witcher 3, Gwent, and an unreleased version of Witcher 3 was compromised too.
The hacker threatens to sell or leak all stolen files if CD Projekt RED doesn't give in to undisclosed demands. CD Projekt RED claims it will not negotiate with the hacker -- which means a bunch of files will likely leak to the web in the coming days/weeks.
To our ex employees: As of this moment, we don't possess evidence that any of your personal data was accessed. However, we still recommend caution (i.e. enabling fraud alerts). If you have questions, please write to our Privacy Team dpo[at]https://t.co/0UUMoqT5tF
— CD PROJEKT RED (@CDPROJEKTRED) February 9, 2021