Warhorse Cyberattack: Kingdom Come Studio Confirms Hackers Accessed Company Systems and Data

The Warhorse cyberattack, confirmed on October 27, 2026, has put one of the games industry’s most closely watched RPG studios in damage-control mode. The Czech developer behind Kingdom Come: Deliverance 2 says intruders gained unauthorized access to its systems and to company data. It has not yet said how much was taken, or by whom.

What Warhorse has confirmed so far

According to the studio’s statement, Warhorse is working with outside cybersecurity experts to lock down its systems, investigate the incident and assess its full impact. It says it is also coordinating with the relevant authorities. Eurogamer reported that the message went out at 11am GMT and that the studio had issued no update since. The shorter version of the notice, addressed to “players and friends,” apologized for the news and thanked the community for its support.

CEO Martin Frývaldský was blunter. “This is a serious incident for Warhorse Studios and everyone affected,” he said, adding that the immediate priorities are securing systems, establishing the full extent of the breach and protecting “our employees, partners, and our community.” Eurogamer noted that his remarks also appeared in a Czech-language report.

Warhorse has said it will not give interviews or further comment until it has verified information to share. That leaves a lot unanswered. Polygon pointed out that the studio hasn’t said whether any user data was involved. The statement refers only to “company data,” which could mean many things, from internal documents to unreleased game material to staff information. None of the sources say which.

Why a studio like Warhorse is a target

Warhorse is not a small outfit working in obscurity. Kingdom Come: Deliverance 2 launched in February 2025 to strong reviews and, per Polygon, sold more than four million copies by the end of that year. The studio is now developing an open-world Lord of the Rings RPG set in Middle-earth, a new Kingdom Come game and a collaboration on a live-action Kingdom Come film. Unreleased projects of that profile are exactly what attackers tend to go after.

The wider record shows how disruptive such breaches can be. Rock Paper Shotgun pointed to CD Projekt Red, Insomniac and Rockstar as studios that have suffered attacks in recent years, with the fallout landing hard on the developers working on the games. Polygon noted that Rockstar has taken a particularly heavy share. Early GTA 6 gameplay footage leaked after one attack, an earlier breach exposed a development build, and the studio was hit again in September by the group ShinyHunters. Capcom, meanwhile, dealt with a Capcom ID data breach only weeks ago.

What we don’t know about the Warhorse cyberattack

Nothing in the available reporting identifies the attackers, their motives or the method they used. Warhorse itself says it is still working out how the breach happened. Rock Paper Shotgun also said it’s unclear whether the incident is connected to a recent rise in AI-enabled hacking, and nothing from the studio suggests it is.

Notably, the studio went public while its investigation was still at an early stage. That candor may help affected people protect themselves sooner, but it also means the company is facing questions it can’t yet answer. Players, partners and staff will be waiting for the follow-up Warhorse has promised “as soon as we responsibly can.” Until then, the main takeaway is that a major studio has confirmed a real intrusion, and the scope of the damage is still being measured.

Explore more on this topic with Vexel Search.