Earlier this month, hackers broke into CD Projekt Red's network, installed a large amount of ransomware, and took the game's source code; CD Projekt Red politely declined the offer and instead went public about the breach. True to their word, the hackers reportedly posted the source for "Gwent" and attempted (and apparently succeeded) to auction off all of the stolen code through a Russian hacking forum.

Now that the source code is out in the wild, CD Projekt Red is reportedly conducting a DMCA takedown to prevent its spread; Vice reports that the studio, through its copyright monitoring company App Global Ltd, last week sent at least two Twitter users with takedown requests, warning them that the Gwent sources they were linking to were "illegally obtained" and "posted without authorization."

The Digital Millennium Copyright Act is often criticized as a blunt instrument that powerful corporations can wield against individuals. For example, in November 2020, Nicalis issued a notice of removal to the Cave Story Engine 2 repository for allegedly using code based on the original game, a claim strongly denied by the lead developer. That same month, Twitch apologized to streamers affected by the wave of music-related DMCA claims, saying it "should never have happened," but also acknowledging that there was no good way to help streamers deal with the claims.

In this case, however, it seems to me like an appropriate use of regulation. The data was stolen outright, and the shared link is a direct result of CD Projekt Red's refusal to pay the ransom. One Twitter user who received a takedown notice over a tweet linking to a torrent containing Gwent's source code admitted that it was not a surprise and said, "Let's just say it was not unexpected."

CD Projekt Red has not publicly commented on the reported takedown notice. We have asked for comment and will update if we receive a response.