Warhorse Studios Confirms Cyberattack Affecting Company Systems and Data

Warhorse Studios, the developer behind Kingdom Come: Deliverance, has confirmed that it has been targeted in a cyberattack. The company says the incident involved unauthorized access to internal systems as well as company data, and it is now working with cybersecurity experts and relevant authorities to determine the full scope of the breach.

The studio has not said what specific information was accessed, whether any material has been published online, or whether the attack has affected its games, ongoing development work, employees, partners, or players. Those unanswered questions are significant, particularly because the company has acknowledged that data was accessed while its investigation remains active.

In a public statement, Warhorse said its immediate work is focused on securing its infrastructure, investigating what happened, and assessing the incident's full impact. The developer stated that it is coordinating with authorities as the situation continues to be examined.

"This is a serious incident for Warhorse Studios and everyone affected," CEO Martin Frývaldský said. "Our immediate priority is to secure our systems, establish the full extent of the breach, and take the necessary steps to protect our employees, partners, and community."

For useful background on this topic, read Azahar Ends Official Support for Anbernic RG DDS Over Piracy-Focused Fork Promotion.

Warhorse is still determining the extent of the breach

The key detail in Warhorse's confirmation is that the intrusion was not limited to an attempted attack or a disruption that was stopped before access was gained. The studio says unauthorized parties reached company systems and company data. However, that does not establish what categories of data were involved, how long access may have lasted, or whether the intruders removed files from the network.

For now, Warhorse has not identified any leaked employee details, internal documents, game builds, artwork, business plans, or material related to unreleased projects. It has also not made a statement indicating that customer or player information was involved. Until the investigation produces firmer findings, it would be premature to assume either that sensitive material has appeared publicly or that no such risk exists.

Frývaldský said Warhorse is dedicating the resources needed to address the situation and will share further information when it can do so responsibly. That wording suggests the studio is trying to balance transparency with an active security response, where disclosing technical details too early could complicate remediation or investigative work.

Why a studio breach can have wide-ranging consequences

Cyberattacks against game developers can affect far more than the games that reach players. Modern studios rely on connected services for development tools, source code, art pipelines, internal communications, testing, publishing coordination, finance, recruitment, and relationships with outside contractors. An intrusion into those systems can require a broad review of access controls and potentially force teams to reset credentials, isolate services, audit devices, and examine logs for signs of further unauthorized activity.

The possible effects vary considerably from case to case. A breach may ultimately have a limited operational impact if systems are secured quickly and the exposed information is narrow in scope. At the other end of the scale, an attacker gaining access to sensitive employee records, in-development game assets, or confidential commercial material can create lasting privacy and business concerns.

Warhorse has not announced a delay, service interruption, or change to any of its development plans. There is likewise no confirmation that projects have been compromised. The confirmed facts are narrower: the company was targeted, unauthorized access occurred, data was accessed, and the developer is working with specialists and authorities.

Unreleased projects may draw attention, but nothing has been confirmed

The breach arrives while Warhorse has publicly confirmed work on more than one future project. Earlier in 2026, it was confirmed that the studio is developing another Kingdom Come game as well as an open-world Lord of the Rings RPG.

That naturally raises questions about whether files tied to either project were among the data accessed. At present, there is no evidence or statement from Warhorse confirming that. No footage, screenshots, documents, or other development materials have been identified by the studio as having been taken or released in connection with this incident.

Embracer Group CEO Phil Rogers previously indicated that the next Kingdom Come game could arrive as early as April 2027, within a broader window extending through March 2028. That remains a prospective timetable rather than a newly announced release date, and Warhorse's cyberattack statement did not revise it. Players should be cautious about treating any alleged future-project material that appears online as authentic while the investigation is ongoing.

The same applies to the Lord of the Rings game. Warhorse has confirmed the project exists, but the cyberattack announcement provides no new information about its development status, release timing, platforms, gameplay, or how the studio's work may have been affected.

Gaming has seen damaging attacks before

The game industry has dealt with several prominent cyberattacks in recent years, underlining why studios often take time before providing detailed public updates. A 2022 attack on Rockstar Games resulted in early Grand Theft Auto 6 footage spreading online, bringing extraordinary attention to a project that was still deep in development.

In 2023, Insomniac Games suffered a breach that led to the release of employee personal information alongside internal company material and early footage from Marvel's Wolverine. Those incidents demonstrated the differing forms an attack can take: some expose development work that is never intended for public viewing, while others carry serious consequences for people whose personal or employment information is involved.

Those examples are context, not proof that Warhorse's incident has followed the same path. Each breach has its own method, targets, timeline, and impact. Warhorse has not confirmed any public leak, ransomware demand, theft of personal records, or exposure of specific project files. The studio's investigation will determine whether any of those concerns apply here.

What players and the community should watch for

Warhorse's next update will be especially important because it may clarify whether the company believes employees, business partners, or its community need to take action. The current statement says the studio's priority includes protecting all three groups, but it does not advise players to change passwords, avoid a specific service, or take any other immediate step.

Until Warhorse communicates otherwise, players should avoid spreading unverified claims about alleged leaks and should be alert for impersonation attempts. Security incidents can lead to fake messages that claim to offer breach details, compensation, game keys, or urgent account instructions. Communications that request passwords, payment details, authentication codes, or downloads should be treated carefully and verified through official channels.

• Warhorse has confirmed unauthorized access to company systems and company data.
• The studio is working with cybersecurity experts and relevant authorities.
• No specific data categories, public leaks, or effects on games have been confirmed.
• There has been no announced change to the studio's future game plans or prospective release windows.
• Further details are expected once Warhorse can share them responsibly.

For the moment, Warhorse Studios' message is one of caution: the incident is serious, the scope is still being assessed, and the company is taking steps to secure its systems. Any clearer picture of who was affected, what information was involved, and whether current or future games face consequences will depend on the results of that ongoing investigation.