Warhorse Studios has confirmed that a cyberattack involved unauthorized access to its company systems and data. The developer of Kingdom Come: Deliverance says it is working with cybersecurity specialists to secure its systems, investigate what happened and assess the incident’s full impact. It is also coordinating with relevant authorities, according to the studio’s statement reported by Rock Paper Shotgun and GamesRadar+.
The confirmation makes clear that company data was accessed, but Warhorse has not publicly specified what information was involved or whether it has been leaked. The studio says it will provide further information when it has verified details it can responsibly share. For now, the scope and consequences of the incident remain under investigation.
What Warhorse has confirmed
Warhorse first acknowledged the attack in a message to players and friends, saying it was working with cybersecurity specialists to protect its systems and understand the full extent of what happened. Eurogamer reported that the statement was released at 11am GMT on October 27 and that no update had followed at the time of its report.
A fuller statement on the studio’s website, quoted by Rock Paper Shotgun and GamesRadar+, says the attack involved unauthorized access to both company systems and company data. CEO Martin Frývaldský described it as a serious incident and said the immediate priorities were to secure the systems, determine the extent of the breach, and protect employees, partners and the community. Warhorse said it was dedicating resources to the response and coordinating with relevant authorities.
These details do not establish what data was accessed, how the intruders entered the environment, or whether any information was copied or published. GamesRadar+ noted that Warhorse had not said whether employee or game-related information had appeared online. The studio’s investigation is intended to establish the impact; until it reports verified findings, claims about specific stolen material would be speculation.
Why the incident matters to the studio’s projects
Warhorse is working on a new Kingdom Come game and an open-world role-playing game set in the world of The Lord of the Rings, according to Eurogamer. The outlet also reported that the studio is collaborating on a Kingdom Come: Deliverance film. The projects make the possibility of exposed internal information a concern, but Warhorse has not confirmed that development material was among the data accessed.
Development teams routinely rely on digital systems to coordinate work, manage files and share information. A successful intrusion can therefore create risks beyond the immediate technical disruption: confidential plans, employee or partner information, and unreleased creative material may all require assessment, depending on what systems and data were reached. In a game studio, premature disclosure of design details or production information can also affect how a project is presented to players. These are general risks, not confirmed outcomes in Warhorse’s case.
For developers and other technology professionals, the important distinction is between an attempted intrusion and a confirmed breach with unknown consequences. Warhorse’s statement confirms unauthorized access to systems and data; it does not yet describe the specific records involved or the method used. That leaves the studio with the difficult work of tracing access, determining what may have been exposed, and deciding what protective or notification steps are appropriate.
What a breach investigation involves
In general, incident response begins with containment: teams work to prevent an intruder from retaining access or moving further through connected systems. Investigators then examine available records and evidence to understand the sequence of events, identify affected accounts or services, and determine which information could have been reached. Recovery may include restoring systems, changing credentials, tightening access controls and checking that protective measures are effective.
Those steps need to balance urgency with preserving evidence. Removing access is essential, but teams also need reliable information to establish what happened and support decisions about the people and organisations affected. This is one reason public statements can remain limited while an investigation is under way: an early account may not yet be complete or verified. Warhorse has said it is working with cybersecurity experts and relevant authorities, but has not described its technical findings or remediation measures in detail.
For studios and software teams, the incident is a reminder that security is not only a matter of protecting production infrastructure. Access to shared repositories, internal communications, business systems and partner environments can carry different kinds of sensitive information. Practical safeguards include limiting access to what each role requires, using strong authentication, maintaining monitored logs and preparing a response process before an incident occurs. These are general security practices, not measures Warhorse has said it adopted or failed to adopt.
What comes next
Warhorse says its immediate focus is securing systems, establishing the full extent of the breach and protecting employees, partners and its community. The studio has not announced a timeline for completing the investigation. Rock Paper Shotgun reported that Warhorse did not plan to comment further until it had more verified information to share, so the next meaningful update is likely to depend on what investigators can confirm and responsibly disclose.
Until then, players and staff should distinguish the confirmed facts from speculation: an attacker gained unauthorized access to company systems and data, and the studio is investigating. Neither the nature of the accessed data nor any effect on the games in development has been confirmed. The incident’s significance will become clearer only when Warhorse provides verified findings about its scope and any resulting impact.
Sources: 3DJuegos, Rock Paper Shotgun, Eurogamer.net, Warhorse Studios, GamesRadar+
