The studio behind one of the best-received RPG games of recent years is dealing with a crisis that has nothing to do with game development. Warhorse Studios, the Prague-based developer of Kingdom Come: Deliverance II, has confirmed it was hit by a cyberattack that gave unauthorized parties access to both its internal systems and company data.
What Warhorse has confirmed so far
The studio posted an official statement on its website confirming the breach. "Warhorse Studios confirms that it has been the target of a cyberattack," the statement reads. "We are working with cybersecurity experts to secure our systems, investigate the incident, and assess its full impact. The attack involved unauthorized access to company systems as well as access to company data. We are coordinating with the relevant authorities as the investigation continues."
CEO Martin Frývaldský followed up with his own message, calling it "a serious incident for Warhorse Studios and everyone affected." He confirmed the studio's immediate focus is on securing systems, determining the full scope of the breach, and protecting employees, partners, and the wider community. He added that further information will be shared "as soon as we responsibly can."
The studio has not yet confirmed whether any data has actually leaked externally. The phrasing around "access to company data" strongly suggests something was taken, but Warhorse is holding off on specifics while the investigation is active.
Why the timing matters for Warhorse's upcoming projects
This breach lands at a sensitive moment. Warhorse is currently juggling at least two major projects: a follow-up set in the Kingdom Come universe and an open-world Lord of the Rings RPG. The Kingdom Come sequel has been pegged for a release window as early as April 2027, with Embracer Group CEO Phil Rogers suggesting it could launch sometime between then and March 2028.
For a studio with two high-profile, unreleased games in active development, the risk of project details, gameplay footage, or internal builds surfacing online is real. The gaming industry has seen exactly that play out before. The Rockstar Games breach in 2022 sent early GTA 6 footage across the internet before anyone at the studio was ready. The Insomniac Games attack in late 2023 exposed employee personal data alongside early Marvel's Wolverine gameplay.
Warhorse hasn't indicated which category of data was accessed, but the precedent is uncomfortable.
KCD2 open-world navigation
What comes next
The investigation is ongoing and Warhorse is working with both cybersecurity professionals and relevant authorities. The studio's transparency so far, publishing a statement quickly and having the CEO speak directly, is a reasonable response to a situation where silence tends to make things worse.
For players, the immediate concern is whether any personal data tied to Warhorse accounts or community platforms was part of what was accessed. That question remains unanswered. Keep an eye on Warhorse's official channels for updates as the investigation progresses.
If you're spending time with the game while this story develops, the Kingdom Come: Deliverance II strategy guides cover everything from early survival to late-game builds to keep you busy in Bohemia.
