Since the person who posted the game component under the CC-BY license has no right to do so, no one who used it in reliance on that license had any rights either, and all such uses were at least technically infringement (unless they came under a copyright exception, which seems unlikely).
The holder of the copyright on the component could sue in any country where a game using it was published. The details of the law, including the rules on damages and other remidies, will vary from country to country.
In the united-states those rules are contained in Chapter 5 of title 17 USC particularly sections 502-505. Section 504 provides for possible money damages. Section 502 provides for a possible injunction (court order to stop infringing). Section 503 provides for for infringing works to be seized. Section 505 provides for possible awards of costs and legal fees to a successful plaintiff (copyright holder).
Section 502 allows injunctions to "prevent or restrain infringement of a copyright" on "reasonable" terms. But when the infringement has already been stopped, no such injunction is needed and a court is not likely to impose one.
Section 503 allows the court to order the impoundment of infringing copies and "plates, molds, matrices, masters, tapes, film negatives, or other articles by means of which such copies or phonorecords may be reproduced". This is largely obsolete for digital content.
Section 504 is the key. It offers the plaintiff a choice between actual damages plus profits and statutory damages. The rule for the first is:
The copyright owner is entitled to recover the actual damages suffered by him or her as a result of the infringement, and any profits of the infringer that are attributable to the infringement and are not taken into account in computing the actual damages.
This means money made by use of the unauthorized content, plus any loss of sales or other losses suffered by the owner. Money mad by the infringing work but not made by use of the infringing content is not included, if this can be proven. Income obtained after the infringing content was removed would probably not be included in the infringer's profits.
Statutory damages can be any amount between $750 and $30,000 that the count thinks is just, but id the infringement is proved to be "innocent" the lower limit is $200. The exact provision reads:
In a case where the infringer sustains the burden of proving, and the court finds that such infringer was not aware and had no reason to believe that his or her acts constituted an infringement of copyright, the court in its discretion may reduce the award of statutory damages to a sum of not less than $200.
An award of costs and fees under section 505 is entirely up to the discretion of the court.
If the maximum possible award of infringer's profits is $10,000, and a defense of innocent infringement is plausible, a plaintiff might well find such a suit unprofitable, given the legal expenses involved in preparing an carrying through such a suit. But that is entirely up to the copyright owner. An owner may choose to file even an unprofitable suit in an effort to deter others.
A person who has discovered that s/he has innocently infringed a copyright and made some money in the process would be wise to document the prompt removal of the infringing content form any publication, and efforts to notify the copyright owner. Ther is no way to be sure what actions the owner will take, if any, within those that the law allows.
Often a owner in such a case will not bring suit if the infringement was apparently innocent, resulting profits were small, the infringement has been halted, and future infringement by that infringer seems unlikely. But different owners have different policies on such matters.
An owner can delay in deciding whether to file suit or not.
