Key Takeaways:
- Warhorse Studios, the Czech developer behind Kingdom Come: Deliverance, confirmed a serious cyberattack on October 27, 2026.
- The attack involved unauthorized access to both company systems and company data — confirmed in an official statement on the studio’s website.
- CEO Martin Frývaldský called it a “serious incident” and said all necessary resources are being dedicated to resolving the situation.
- As of October 28, no data has leaked publicly, no attacker has been identified, and the investigation is still active.
- Warhorse is currently developing two major unannounced games — an open-world Middle-earth RPG and a new Kingdom Come adventure — making this a high-stakes breach.
Update (October 28, 2026): As of this morning, Warhorse Studios has not released any further statements beyond the original October 27 announcement. No attacker or ransomware group has claimed responsibility publicly, and no leaked files or stolen data have appeared online. The studio confirmed it will not be giving interviews or additional comments while the investigation is active, and will share verified updates as soon as it responsibly can. The situation remains fluid and we will continue to update this article.
If you’ve been following Warhorse Studios and their work on the Kingdom Come series, you already know these guys don’t make small games. So when news drops that they’ve been hit by a cyberattack — and a serious one at that — it’s the kind of thing that makes the whole gaming community stop and pay attention.
On October 27, 2026, Warhorse Studios officially confirmed that hackers breached their systems in a cyberattack that involved unauthorized access to both internal company systems and company data. This isn’t just a vague “we think something happened” situation — the studio came out and acknowledged it directly in an official statement posted on their website.
What Exactly Happened at Warhorse Studios?
Warhorse put out a statement across their social channels first, keeping things brief but honest. They told their community: “We’re sorry to share that Warhorse Studios has been hit by a cyberattack. We’re working with cybersecurity specialists to secure our systems and understand the full extent of what happened. Thank you for standing with us.”
A more detailed follow-up statement appeared on the studio’s website, confirming the real meat of it — the attackers didn’t just knock on the door, they actually got in. The statement confirmed that the breach involved unauthorized access to company systems as well as access to company data. They’ve also looped in the relevant authorities as the investigation continues.
CEO Martin Frývaldský stepped forward and addressed the situation head-on. His statement made it crystal clear that this isn’t being downplayed internally. “This is a serious incident for Warhorse Studios and everyone affected,” he said. “Our immediate priority is to secure our systems, establish the full extent of the breach, and take the necessary steps to protect our employees, partners, and community. We are dedicating the resources needed to address this situation and will communicate further information as soon as we responsibly can.”
The studio has confirmed it won’t be doing interviews or giving additional comments while the investigation is still active, and that they’ll share further verified information once they have it. That’s the right call — no point speculating publicly when you’re still piecing together what went down.
Has Any Data Been Leaked Yet?
As of October 28, the answer is no — nothing has surfaced publicly. No leaked files, no stolen project footage, no ransom demands posted on dark web forums, and no hacker group has come forward to claim responsibility. That’s either a good sign, or it simply means we’re still in the early stage before anything surfaces.
What we do know is that Warhorse’s own statement confirmed company data was accessed. That’s a significant admission that goes beyond a simple system compromise. Whether that data includes internal HR records, confidential build files for upcoming games, business contracts, or employee personal information — none of that has been specified yet. Until the cybersecurity investigation concludes, the full picture won’t be clear.
The identity of the attacker also remains unknown. No ransomware group has publicly claimed the hit, which could mean a ransom demand was made privately, or that the motivation behind the attack was something other than financial extortion. Both scenarios are common in high-profile studio breaches.
Why This Matters — Warhorse Has Massive Games in Development
The timing of this attack is what makes it particularly alarming for fans. Warhorse Studios isn’t just sitting on their laurels after the massive success of Kingdom Come: Deliverance II, which sold over 6 million copies by mid-2026. They’re currently developing two major unannounced projects simultaneously.
Back in May 2026, the studio officially confirmed they’re building an open-world RPG set in Middle-earth — a full Lord of the Rings game — alongside a new Kingdom Come adventure. The Middle-earth project is led by Viktor Bocan, the design director of Kingdom Come: Deliverance II, while the next Kingdom Come title has creative director Prokop Jirsa attached. Studio founder Daniel Vávra stepped back from day-to-day development earlier this year to focus on a Kingdom Come film adaptation.
That means their servers are almost certainly holding pre-production assets, early concept art, design documents, and build files for two of the most anticipated unannounced RPGs in the industry right now. Exactly the kind of material that ransomware groups value — either for extortion leverage or to dump online for chaos if a ransom isn’t paid.
Gaming Studios Are Prime Cyberattack Targets
This kind of attack isn’t random. Game studios have become increasingly attractive targets for hackers because of what they hold — unreleased games, source code, player databases, internal communications, and licensing deals worth hundreds of millions. We’ve seen it happen to Insomniac Games (Rhysida ransomware group, 1.67TB of data leaked), Rockstar Games (GTA 6 footage dumped), CD Projekt Red (HelloKitty ransomware), and Ubisoft. Every time, the damage is significant and long-lasting.
Warhorse is part of PLAION (formerly Koch Media), which sits under the broader Embracer Group umbrella. That corporate chain means the potential blast radius of this breach could extend well beyond Warhorse’s Prague office — touching business contracts, licensing terms for the Middle-earth RPG deal, and partner data across PLAION’s wider network.
What Happens Next?
The investigation is ongoing and the studio has gone quiet on specifics, which is the correct approach — you don’t tip your hand to attackers while you’re still locking things down. The studio’s own statement made clear that no further comments will come until they have verified information to share.
There are several things to watch in the coming days and weeks. First, whether any ransomware group publicly claims the attack — that would immediately shift the situation into a ransom negotiation scenario. Second, whether any data surfaces on leak sites or dark web forums. Third, whether Warhorse is forced to delay any communication around their upcoming projects as a result of the breach.
The community has responded with sympathy rather than panic, which reflects the goodwill Warhorse has built over the years. Fans are watching closely, and we’ll update this article the moment any new verified information comes through.
For more gaming news, check out our coverage on The Wolf Among Us Remastered release date and the Pokémon Red prototype cartridge that sold for $100,000.
