Von Online Games VIP Editorial
·
Warhorse Studios says attackers accessed company systems and data as cybersecurity experts investigate the incident and its possible impact.
Warhorse Studios, the developer behind Kingdom Come: Deliverance and its sequel, is investigating what it describes as a serious cybersecurity incident. According to IGN, the studio said unauthorized parties accessed company systems and data, while cybersecurity experts work to secure the network and determine what happened.
IGN reports that Warhorse has also contacted authorities about the incident. The studio has not disclosed what information may have been accessed, how the intrusion happened, or whether the event has affected its games, services, employees, partners, or upcoming projects. Those details remain unconfirmed while the investigation continues.
Warhorse said it will not provide further comment or conduct interviews on the subject for now, according to IGN. The company plans to share more information when it can do so responsibly. For players, that means the immediate story is an ongoing investigation rather than a confirmed account of stolen information, disrupted games, or changes to the studio's development plans.
IGN reports that Warhorse is working with cybersecurity specialists on three immediate tasks: securing its systems, investigating the incident, and assessing its full impact. The studio has also involved authorities in an effort to identify those responsible. This confirms that the event involved access to company systems and data, but it does not establish the scope of that access.
Warhorse CEO Martin Frývaldský described the situation as serious for the studio and for people affected by it, according to IGN. His stated priorities, as reported by IGN, are to secure the systems, establish the extent of the breach, and take steps intended to protect employees, partners, and the wider community.
That wording is important because the investigation is still in progress. Warhorse has not said whether the accessed data included employee information, partner records, development material, internal communications, or player-related information. It has also not said whether any data was copied, published, encrypted, deleted, or used for further attacks. None of those possibilities should be treated as confirmed from the available report.
There is also no confirmed indication in the supplied report that Kingdom Come: Deliverance, Kingdom Come: Deliverance 2, or any other Warhorse title has been taken offline. The report does not identify a ransom demand, a data leak, a service outage, or a release delay. It is therefore too early to connect the incident to a specific player-facing consequence.
From a player perspective, a breach at a game studio can matter even when the games themselves continue to run normally. Studios hold information and systems connected to development, publishing, support, business partners, and community operations. An investigation may reveal that only internal infrastructure was affected, or it may identify a wider impact. At this stage, the source does not establish which of those situations applies to Warhorse.
Analysis: The most useful distinction for players is between a confirmed intrusion and an unconfirmed downstream effect. Warhorse has acknowledged the first. It has not yet confirmed the second. That means players should avoid treating reports of a serious incident as evidence that their personal accounts or game installations were compromised.
Players should also be cautious about unofficial messages claiming to provide details about the attack. This is general safety advice rather than a report of activity linked to Warhorse. During a public investigation, false updates can imitate studio announcements or use a known incident to encourage people to open suspicious links. Any future guidance about account security, password changes, support channels, or affected services should be checked against an official Warhorse communication.
The incident could still become relevant to players if Warhorse later confirms that external services, community tools, or user data were involved. It could also remain primarily an internal business and development matter. The available evidence does not allow a firm conclusion either way, which is why the studio's promised updates will be more significant than speculation about the breach.
Warhorse's projects are part of the context
Warhorse is currently associated with more than the Kingdom Come series. According to IGN, the studio is working on a Lord of the Rings role-playing game described as an open-world Middle-earth RPG. IGN also reports that Warhorse is working on a new Kingdom Come project, which is expected to be either Kingdom Come: Deliverance 3 or a spinoff. The source does not provide a formal title, release date, platform list, or launch window for either project.
That context explains why the investigation is being watched beyond the studio's existing games. Development teams manage sensitive material long before a project is ready for public disclosure. Analysis: If the incident reached development systems, it could create risks around unreleased information or production work, but the supplied report does not say that either upcoming project was accessed or disrupted. The possibility should be treated as a reason to monitor verified updates, not as an established consequence.
IGN also notes that Kingdom Come: Deliverance 2 launched the previous year and received critical and commercial acclaim. In its review analysis, IGN awarded the game a 9/10, citing its melee combat and story. That assessment provides background on the studio's recent profile, but it does not change what is known about the cybersecurity incident. The review was an evaluation of the game, not evidence about Warhorse's current systems or the investigation.
The source further notes that Warhorse has recently faced criticism over its use of generative AI, and that Daniel Vávra, the previous director of Kingdom Come: Deliverance, left that role in February to focus on a Kingdom Come movie. Those are separate pieces of company context. The supplied report does not connect either matter to the cybersecurity incident.
What remains unknown
The central unanswered question is the extent of the access. Warhorse has acknowledged that company systems and data were accessed, but it has not identified the systems, the type of data, the time period involved, or the number of people or organizations potentially affected. IGN reports that the studio is still assessing the full impact, so those details may depend on the forensic investigation.
It is also unknown whether the attackers obtained data without altering systems, disrupted operations, demanded payment, or released material publicly. The source does not report any of those outcomes. There is no confirmed information about compromised player accounts, payment details, employee records, partner information, source code, build files, or unreleased game assets.
Warhorse has not announced a timetable for a fuller update. It has said that it will communicate more information when it can do so responsibly, according to IGN. That leaves the timing of the next statement unclear. The studio's decision not to offer interviews also means that additional reporting will likely depend on official notices, authority statements, or new evidence from the investigation.
IGN places the Warhorse incident alongside recent cyberattacks involving Japanese developer Capcom and retailer PlayAsia. The report says Capcom had 196 customer accounts compromised and that PlayAsia was taken offline. It also references security experts' use of the term Black October for a period in which AI agents have disrupted internet security. However, IGN states that it is unclear whether those events are related to the Warhorse incident. There is currently no evidence in the supplied source establishing a common attacker or campaign.
The next meaningful update should clarify whether the incident affected people outside Warhorse and whether any player-facing services require action. A useful statement would identify the categories of data involved, the systems that were isolated or restored, and whether the studio has found evidence of data theft or publication. Until Warhorse or authorities provide such information, the impact cannot be measured from the initial announcement alone.
Players should also watch for practical instructions rather than broad reassurances. If Warhorse determines that accounts, support systems, or other services were involved, it may need to explain what affected users should do. If the investigation finds no impact beyond internal systems, that would also be important confirmation. Neither outcome has been announced.
For the upcoming Lord of the Rings RPG and the next Kingdom Come project, the key question is whether Warhorse reports any effect on development or planned communication. No such effect has been confirmed. The same applies to existing games: the report does not announce an outage, patch, delay, or change to their availability.
For now, the confirmed facts are limited but significant. Warhorse says it suffered a serious cybersecurity incident, attackers accessed company systems and data, experts and authorities are involved, and the studio is still determining the full impact. Everything beyond that remains subject to investigation and future evidence.