This is not an extraordinary claim - It was widely covered in the press. Even cursory google searching should find plenty of stories - Here's one picked randoml

This is not an extraordinary claim - It was widely covered in the press. Even cursory google searching should find plenty of stories - Here's one picked randomly: https://kotaku.com/cd-projekt-red-confess-hack-severity-while-everyones-di-1847074826 https://kotaku.com/cd-projekt-red-confess-hack-severity-whil... The attackers had full access to version control servers and therefore the ability to directly modify the versioned code without going through a normal commit process, giving them effectively unrestricted commit access. The source code for many CDPR properties was later sold by the attackers.