cdpr leak response