Warhorse Studios Confirms Cyberattack, Says Full Extent of Breach Still Unknown

Warhorse Studios Confirms Cyberattack, Says Full Extent of Breach Still Unknown

Warhorse Studios, the Czech developer behind Kingdom Come: Deliverance, has confirmed it was hit by a cyberattack involving unauthorized access to its systems and company data. The studio disclosed the breach on October 27, 2026, in a statement on its website and a post on X, saying it is working with cybersecurity specialists and the relevant authorities. The full scope of the incident is still under investigation.

Studio website confirms break-in to systems and data

"Warhorse Studios confirms that it has been the target of a cyberattack," the studio's website statement begins. "We are working with cybersecurity experts to secure our systems, investigate the incident, and assess its full impact. The attack involved unauthorized access to company systems as well as access to company data. We are coordinating with the relevant authorities as the investigation continues." In a shorter message on X, the studio apologized to players, saying it was working to understand the full extent of what happened and thanking the community for standing with it.

CEO calls it serious, puts staff and players first

Warhorse CEO Martin Frývaldský struck a grave tone: "This is a serious incident for Warhorse Studios and everyone affected. Our immediate priority is to secure our systems, establish the full extent of the breach, and take the necessary steps to protect our employees, partners, and community." The studio added that it is committing the resources needed to resolve the situation and will share more information as soon as it responsibly can, declining to release details in the meantime.

Attackers unknown, damage still being assessed

So far the studio has said nothing about who was behind the attack, how they got in, or exactly what data was touched. Every outlet covering the story stresses the same caveat: the scope is unknown. TwistedVoxel noted the Prague-based studio has yet to disclose what happened or whether any data was compromised. Beyond the two confirmed facts — systems accessed, data accessed — everything else, from stolen employee records to leaked game files, remains unconfirmed.

Two unreleased games raise the stakes for leaks

What makes this breach sensitive is the studio's pipeline. Warhorse is working on two open-world projects: a Lord of the Rings role-playing game set in Middle-earth, and a new Kingdom Come adventure widely expected to be Kingdom Come: Deliverance 3 or a spinoff. A trademark filing for "Kingdom Come Salvation" surfaced in July, according to Italian press. Early builds, design documents, and marketing materials for either title would be prime leak material, and the industry has seen how pre-release leaks can haunt major launches.

A rough October for game-industry security

Warhorse is not the only gaming name dealing with intruders this month. Japanese publisher Capcom suffered a cyberattack that leaked about 11.77 million CAPCOM ID records, including 196 customer accounts whose passwords were changed without authorization (Capcom has since reset them), while retailer Playasia was taken offline, and some security watchers have dubbed the wave of AI-agent-linked disruptions "Black October." There is no evidence connecting those incidents to the Warhorse breach, and the studio itself has drawn no such link.

Secure, investigate, disclose: the three tasks ahead

The studio's stated plan has three parts: secure the systems, investigate the intrusion, and assess the full impact, then update the public. The two questions everyone wants answered — whether staff or player data was exposed, and whether unreleased game material was taken — will have to wait for that investigation. Until then, Warhorse says, it will not drip-feed speculation.