Skip to main content

Hack of CD Project Red's official forum exposes data of 1.9 million users

the witcher cd projekt forum hack witcher2free header
Image used with permission by copyright holder
Unbeknownst to most users, the official forums of Polish game studio CD Projekt Red, developer of The Witcher, were hacked in March 2016, exposing the data of nearly 1.9 million users.

The affected data includes email addresses, passwords, and usernames, according to Have I Been Pwned, a security site run by Troy Hunt, Microsoft regional director and an online security expert.

More: ‘Cyberpunk 2077’ to eclipse open world of ‘The Witcher 3,’ offer seamless multiplayer

“In March 2016, Polish game developer CD Projekt RED suffered a data breach,” the site said. “The hack of their forum led to the exposure of almost 1.9 million accounts along with usernames, email addresses, and salted SHA1 passwords.”

The breach wasn’t completely unknown, as CD Projekt published a short forum post about it in December (nine months after it took place) and said emails would be sent to affected users . Another post, from January, indicates that not all forum users received an email. The post said that the data was from an older forum database and that any passwords obtained were encrypted, although the developer recommended users change their passwords anyway just in case.

“Since the event, we’ve conducted additional external security tests, and we will double our efforts to ensure such situations don’t occur in the future,” the post said, promising that the particular vulnerability that allowed the breach to occur had already been addressed.

Forum hacks aren’t unique, and players are used to receiving the “whoops, time to change your password” email at this point. But Engadget points out that it’s not the fact that the hack occurred that’s worrying, but the fact that it took so long for CD Projekt Red to notify users about it. Even when the developer did so, it was in a way that seems designed to ensure it will reach the fewest number of players possible, which is supported by the fact that the breach is just now making news.

Editors' Recommendations

Michael Rougeau
Former Digital Trends Contributor
Mike Rougeau is a journalist and writer who lives in Los Angeles with his girlfriend and two dogs. He specializes in video…
The Witcher gets a new single-player Gwent spinoff
Concept art for Project Golden Nekker shows a goblin looking at a map.

Up for a round of Gwent? The card game featured in The Witcher 3: Wild Hunt is getting a new spinoff game, as revealed by IGN. Code-named Project Golden Nekker, it will be a more single-player focused spin on Gwent.

Gwent is a tactical card game where players slot troops and beasts into two rows to perform close-range and long-range attacks. It was a popular side game within The Witcher 3 -- so much so that CD Projekt Red turned it into its own free-to-play, stand-alone card game that's available on Xbox, PlayStation, PC, and mobile devices.

Read more
Cyberpunk 2077 and Witcher 3 current-gen ports delayed to 2022
cyberpunk and witcher delayed 2077

In another twist for the Cyberpunk 2077 saga, CD Projekt Red delivered bad news concerning the current-gen port of that game, as well as The Witcher 3: Wild Hunt. The Xbox Series X/S and PlayStation 5 releases of both titles are being delayed from their initial "late 2021" release to 2022.

In September, CD Projekt Red reassured fans that the upgraded current-gen releases of The Witcher 3: Wild Hunt and Cyberpunk 2077 were still on track to release this holiday season. The new press release says the company based the decision to push this planned release back on "recommendations supplied by persons supervising development."

Read more
Cyberpunk 2077, The Witcher 3 next-gen upgrades still on track for this year
Holding a gun to an enemy in Cyberpunk 2077

With just three months left in 2021, developer CD Projekt Red has some big plans to cap off what has been a difficult year for the company. In its latest financial report, the company revealed that it's still planning on releasing two games this year, both next-gen updates. According to the report, the previously announced next-gen versions of The Witcher 3: The Wild Hunt and Cyberpunk 2077 are still on track to arrive in "late 2021."

Details on what players can expect from the new versions of both Cyberpunk 2077 and The Witcher 3: The Wild Hunt are sparse. The financial report itself makes no mention of what will be included in the next-gen version of Cyberpunk 2077. The Witcher 3: The Wild Hunt's next-gen release on the other hand will come with all of the game's expansions and "visual upgrades," along with "extra items inspired by the Netflix series."

Read more