If that's the case, why all the servr issues on gog's end all the sudden? Why do i keep seeing a bear holding the world?

You are giving internet users too much credit. It's entirely possible it's an adult. I've seen many writing even stupider things, over the internet.

To be entirely fair, that's not entirely an uncommon occurrence here.

No, but it's been really bad ever since the hack,and that's prior to the sale.

It's possible they took existing servers and repurposed them in an emergency, or they're getting internally DDoSed (since as we see the gog bear) using information gathered from the exploit, but i'll lean towards them sharing the servers. I assume the gwent accounts are tied to gog, too. And if they can deploy from that server, they have access to the GOG servers, and, thus, indirect access to user accounts at the very least.

Also, i don't think it would be particularly unreasonable to think that GOG would have mostly the same vulnerabilities. Someone going under the alias "HelloKitty" appears to be the person. There's some "hacking forums," involved, implying that the given message boards are not likely for hacktivism. I see no reason why our data would not be considered viable collateral for a threat, too, yet it did not appear to be. This implies to me that it was possibly someone who actually is either a customer or a former employee. However, the fact that they got in, if they were a customer, the weakneses were probably revealed to others and that means that more than one person compromised the system. We don't know how long they had control, either. We only know because GOG found out via the ransomware. They could've had this access for 2 or 3 years for all anyone knows. There might've been others who independently found the same vulnerabilities.

That said, keep in mind, they said CDP was hacked, not CDPR. Given all that's going on, i don't think they know whether or not our data was compromised. Their advice to their employees implies that they have no idea as to the extent of the damage.

Apparently they've put up the files for auction on an exploit forum for minimum 1 million USD. Insta buyout of 7 million.

pretty good example

Some say bears holding up entire planets are portents of impending doom... especially when they look tiny and not particularly muscular. Quickly, somebody offer that GOGBear a gym subscription, or at least a discount coupon!

To be fair, a lot of places are like this for some time after starting up.

They have very limited money when they start so they'll either hire a very small team of cheap in-house developers (I try not to stereotype, but I've observed a pattern where a lot of those developers implement the whole thing in php) to implement their website or they'll outsource the coding to a small company, specialised in making websites on the quick. Either way, the rule of the game is to implement everything yesterday on a shoestring budget.

Even if the developers involved were top notch developers (they usually aren't... most of them haven't updated their skills enough to use anything better than php afterall and often will lack awareness of sound design patterns/standards like using proper REST for http apis even over a decade after such patterns have become widely known), the time constraints pretty much guarantee that the resulting system will suffer from significant technical debt right out the door.

From there, they'll hopefully start making money and the amount of income they generate will dictate the future quality of the system. If they make tons of cash, they'll be able to hire one or more teams of skilled developers with more time to improve the code (at that point, they'll either do a complete rewrite from scratch or slowly refactor away the legacy codebase, depending on how much of a mess things really were and how much resources they can invest).

If they don't make as much money as originally anticipated (keeping in mind that their primary goal is to turn up a healthy profit, they won't hire a crack team of developers if it will eat away a significant portion of their profits, even if they could do so while remaining green), then technical debt won't be repaid (or will be repaid extremely slowly) and the system will probably remain cr*ppy for the remainder of the company's lifespan (after which it will, thankfully, be shelved).

Given that we don't have access to GOG's financial information (and frankly, I haven't taken a look at their codebase, though the fact that they are still working in php is definitely not a good sign), its hard to know exactly what is happening there.

Yes, time and legacy code are a programmer's worst nightmare.

The only think they leak is the source code of games apparently, the mayor problem so far is Gwent, that is a full online game and probably will have access to some vulnerabilities with the source code, respect the other games, is more worked related, they release a toon of work for others to use.

Apparently they've sold the rest of the information now, no confirmation what price. Crazy stuff

Or, perhaps, you have watched the (classic!) Sneakers?
+1
Perhaps if someone with (access to) authority were to make a long-form journalistic report into the breach on the forum?

Depends on how it is written; is it possible to assuage the Gell-Mann cynicism?
I always adhere to Auguste Kerckhoffs's assumption (from his 1883 book La Cryptographie Militaire), usually recast as: CE Shannon's maxim (1948, A Mathematical Theory of Communication).

Unfortunately no. Nor have I seen Hackers or even Get Smart or The Man from Uncle.
Don't forget that GOG deliberately limits their talent pools by forcing the idea of having to work in house in Poland. Now, I'm not exactly well versed in technical pools of workers, but I can't exactly recall any accolades of technical collages/universities in Poland; most of those happened in Hungary.

Go on, read any of the 6 or so applications for software applications, and you'll find they all contain the same line somewhere around the middle end; and I quote: "The hired individual will need to work in-house, in our office based in Warsaw, Poland."

Even now. During a global pandemic, when telepresence would be a much smarter thing to mention.