CD PROJEKT RED Company Cyber Security Posture
cdprojektred.comCD PROJEKT RED is home to over 1000 game-making professionals from all over the globe. We speak many different languages, but share one love — video games. We are creators of The Witcher series of games, including the acclaimed The Witcher 3: Wild Hunt. Most recently, we have created Cyberpunk 2077 and its spy-thriller expansion Phantom Liberty. We are headquartered in Warsaw, Poland, with studios in Cracow and Wroclaw. In North America, we operate in Vancouver and will be opening a new studio in Boston to drive development on the followup to Cyberpunk 2077. We’re proud to have a gamer-first approach, a diverse & supportive culture, and a focus on mature, meaningful storytelling that will inspire gamers for years to come.
CPR Company Details
cd-projekt-red
1288 employees
439967.0
none
Computer Games
cdprojektred.com
Scan still pending
CD _3137125
In-progress
CPR Risk Score (AI oriented)Between 200 and 800
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.
CPR Global Score.png)
CD PROJEKT RED Company Scoring based on AI Models
| Model Name | Date | Description | Current Score Difference | Score |
|---|---|---|---|---|
| AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 200 and 800 |
CD PROJEKT RED Company Cyber Security News & History
| Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
|---|---|---|---|---|---|---|---|
| CD PROJEKT RED | Breach | 90 | 5 | 02/2021 | CDP14112222 | Link | |
Rankiteo Explanation : Attack threatening the organization's existenceDescription: The popular videogame development firm CD PROJEKT Group was targeted in a cyber security breach in February 2021. The attackers are leaking the stolen internal data including current/former employee and contractor details as well as the data-related games, on the internet. | |||||||
| CD PROJEKT RED | Cyber Attack | 90 | 5 | 02/2021 | CDP162228222 | Link | |
Rankiteo Explanation : Attack threatening the organization's existenceDescription: CD Projekt Red was targeted in a cyber attack just before the release of Cyberpunk 2077. The attackers managed to extract the source codes to the company's games and erase PR, administration, and investor relation documents from their servers which will be released upon the payment by the company. But the company refused to pay up and started restoring the backups and worked on securing its systems from any such attack. | |||||||
| CD PROJEKT RED | Data Leak | 85 | 3 | 06/2017 | CDP1248311022 | Link | |
Rankiteo Explanation : Attack with significant impact with internal employee data leaksDescription: An unidentified individual Revealed a few internal files belonging to CD Projekt Red. The hackers demanded ransom as a reward for not leaking their Cyberpunk 2077 Data but they denied to pay that eventually lead to the files being published online. It took additional actions to strengthen and enhance the security of its systems. | |||||||
CD PROJEKT RED Company Subsidiaries
CD PROJEKT RED is home to over 1000 game-making professionals from all over the globe. We speak many different languages, but share one love — video games. We are creators of The Witcher series of games, including the acclaimed The Witcher 3: Wild Hunt. Most recently, we have created Cyberpunk 2077 and its spy-thriller expansion Phantom Liberty. We are headquartered in Warsaw, Poland, with studios in Cracow and Wroclaw. In North America, we operate in Vancouver and will be opening a new studio in Boston to drive development on the followup to Cyberpunk 2077. We’re proud to have a gamer-first approach, a diverse & supportive culture, and a focus on mature, meaningful storytelling that will inspire gamers for years to come.
Access Data Using Our API
Get company history
Rapid.png)
CPR Cyber Security News
Is Cyberpunk 2077 version 2.3 update delayed?
The programme is designed for non-technical professionals, engineers, IT managers, and those seeking a domain switch into cybersecurity and AI.
Security breach update
This message is a follow-up on the February security breach which targeted the CD PROJEKT Group. Today, we have learned new information ...
Cyberpunk 2077 Exploit Allows Malicious Actors to Gain Control of Gamers PCs
CD Projekt Red (CDPR), the developers of Cyberpunk 2077, is warning PC gamers against downloading mods and custom saves due to a vulnerability that may let ...
Cyberpunk 2077 makers CD Projekt hit by ransomware hack
The maker of popular video game Cyberpunk 2077 has been hacked in a ransomware attack. CD Projekt Red said hackers had accessed its internal ...
CD Projekt Red says internal data from ransomware breach is being spread online
As part of the breach, hackers made off with the source code for titles including Cyberpunk 2077 and an unreleased version of Witcher 3. The ...
Hackers Begin Sharing Internal CD Projekt Red Data Publicly
Cyberpunk 2077 and Witcher 3 developer CD Projekt Red (CDPR) announced hackers had targeted the company and attempted to hold it to ransom.
Hackers of CD Projekt Red threaten to auction stolen source code
Hackers claimed that they specifically obtained source files for the games Cyberpunk 2077 and Gwent – a card game spin-off of The Witcher series ...
CD Projekt Red Hackers Allegedly Ready To Auction Stolen Source Code
It appears as if those hackers are ready to cash out with a big-money auction of the data, which allegedly includes source code for some of the Polish studio's ...
Information regarding data security
CD PROJEKT SA has been recently hit by a targeted cyber attack, discovered on February 8 th , 2021. Even though we have not confirmed a “leak” of your personal ...
CPR Similar Companies
Keywords Studios
We provide creative services to the global video games industry and beyond through our end-to-end platform, supercharged by our own technology. Our goal is to help you imagine more for your IP, bringing to life digital content that entertains, connects, and educates people worldwide. Established
Ubisoft
Ubisoft’s 19,000 team members, working across more than 30 countries around the world, are bound by a common mission to enrich players’ lives with original and memorable gaming experiences. Their commitment and talent have brought to life many acclaimed franchises such as Assassin’s Creed, Far Cry,
Epic Games
Founded in 1991, Epic Games is a leading interactive entertainment company and provider of 3D engine technology. Epic operates Fortnite, one of the world’s largest games with over 350 million accounts and 2.5 billion friend connections. Epic also develops Unreal Engine, which powers the world’s lead
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
CPR CyberSecurity History Information
How many cyber incidents has CPR faced?
Total Incidents: According to Rankiteo, CPR has faced 3 incidents in the past.
What types of cybersecurity incidents have occurred at CPR?
Incident Types: The types of cybersecurity incidents that have occurred incidents Cyber Attack, Data Leak and Breach.
How does CPR detect and respond to cybersecurity incidents?
Detection and Response: The company detects and responds to cybersecurity incidents through remediation measures with Restoring backups, Securing systems.
Incident Details
Can you provide details on each incident?
Incident : Data Breach
Title: CD Projekt Red Data Breach
Description: An unidentified individual revealed a few internal files belonging to CD Projekt Red. The hackers demanded ransom as a reward for not leaking their Cyberpunk 2077 Data but they denied to pay that eventually lead to the files being published online.
Type: Data Breach
Attack Vector: Unidentified
Threat Actor: Unidentified Individual
Motivation: Ransom
Incident : Cyber Attack
Title: CD Projekt Red Cyber Attack
Description: CD Projekt Red was targeted in a cyber attack just before the release of Cyberpunk 2077. The attackers managed to extract the source codes to the company's games and erase PR, administration, and investor relation documents from their servers which will be released upon the payment by the company. But the company refused to pay up and started restoring the backups and worked on securing its systems from any such attack.
Type: Cyber Attack
Motivation: Extortion
Incident : Data Breach
Title: CD PROJEKT Group Cyber Breach
Description: The popular videogame development firm CD PROJEKT Group was targeted in a cyber security breach in February 2021. The attackers are leaking the stolen internal data including current/former employee and contractor details as well as the data-related games, on the internet.
Date Detected: February 2021
Type: Data Breach
What are the most common types of attacks the company has faced?
Common Attack Types: The most common types of attacks the company has faced is Breach.
Impact of the Incidents
What was the impact of each incident?
Incident : Data Breach CDP1248311022
Data Compromised: Internal files, Cyberpunk 2077 Data
Incident : Cyber Attack CDP162228222
Data Compromised: Source codes, PR documents, Administration documents, Investor relation documents
Incident : Data Breach CDP14112222
Data Compromised: Current/former employee and contractor details, Data-related games
What types of data are most commonly compromised in incidents?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Internal files, Cyberpunk 2077 Data, Source codes, PR documents, Administration documents, Investor relation documents, Current/former employee and contractor details and Data-related games.
Which entities were affected by each incident?
Response to the Incidents
What measures were taken in response to each incident?
Incident : Cyber Attack CDP162228222
Remediation Measures: Restoring backups, Securing systems
Data Breach Information
What type of data was compromised in each breach?
Incident : Data Breach CDP1248311022
Type of Data Compromised: Internal files, Cyberpunk 2077 Data
Data Exfiltration: True
Incident : Cyber Attack CDP162228222
Type of Data Compromised: Source codes, PR documents, Administration documents, Investor relation documents
Data Exfiltration: True
Incident : Data Breach CDP14112222
Type of Data Compromised: Current/former employee and contractor details, Data-related games
Data Exfiltration: True
Personally Identifiable Information: True
What measures does the company take to prevent data exfiltration?
Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Restoring backups, Securing systems.
Ransomware Information
Was ransomware involved in any of the incidents?
Post-Incident Analysis
What were the root causes and corrective actions taken for each incident?
Incident : Data Breach CDP1248311022
Root Causes: None
Corrective Actions: Additional actions to strengthen and enhance the security of its systems.
What corrective actions has the company taken based on post-incident analysis?
Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Additional actions to strengthen and enhance the security of its systems..
Additional Questions
General Information
What was the amount of the last ransom demanded?
Last Ransom Demanded: The amount of the last ransom demanded was True.
Who was the attacking group in the last incident?
Last Attacking Group: The attacking group in the last incident was an Unidentified Individual.
Incident Details
What was the most recent incident detected?
Most Recent Incident Detected: The most recent incident detected was on February 2021.
Impact of the Incidents
What was the most significant data compromised in an incident?
Most Significant Data Compromised: The most significant data compromised in an incident were Internal files, Cyberpunk 2077 Data, Source codes, PR documents, Administration documents, Investor relation documents, Current/former employee and contractor details and Data-related games.
Data Breach Information
What was the most sensitive data compromised in a breach?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Internal files, Cyberpunk 2077 Data, Source codes, PR documents, Administration documents, Investor relation documents, Current/former employee and contractor details and Data-related games.
Ransomware Information
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
