Warhorse Studios confirmed on October 27, 2026 that it has been hit by a cyberattack.

In a statement on its website, the studio said: "Warhorse Studios confirms that it has been the target of a cyberattack. We are working with cybersecurity experts to secure our systems, investigate the incident, and assess its full impact. The attack involved unauthorized access to company systems as well as access to company data. We are coordinating with the relevant authorities as the investigation continues."

The studio also posted on X: "We're sorry to share that Warhorse Studios has been hit by a cyberattack. We're working with cybersecurity specialists to secure our systems and understand the full extent of what happened. Thank you for standing with us."

The Czech-based developer is best known for Kingdom Come: Deliverance and Kingdom Come: Deliverance 2, which launched February 4, 2025 to critical acclaim and sold over 4 million copies by the end of that year, according to Polygon.

Warhorse is simultaneously working on an open-world Middle-earth RPG based on The Lord of the Rings and "a new Kingdom Come adventure," expected to arrive before March 2028, per Metro.

CEO Martin Frývaldský told Czech media: "This is a serious incident for Warhorse Studios and for everyone affected. Our immediate priority is to secure the systems, determine the full extent of the breach, and take all necessary steps to protect our employees, partners, and our community."

He added the studio is "deploying all necessary capabilities and resources to address this situation," though he did not reveal the purpose of the attack or its impact. Eurogamer notes the statement was machine-translated from a Czech report.

PC Gamer observes that the most obvious target would be details on Warhorse's two announced upcoming games, and that a successful attack could expose the studio to the kind of leaks that plagued Rockstar in the build-up to GTA 6, when early builds leaked materials widely.

Kotaku notes it's unclear what data, if any, was stolen, and points out the attack comes amid a rash of security problems, including AI-surfaced vulnerabilities and a PHP issue that recently took Street Fighter 5 offline. KitGuru adds that no hacking group has come forward to claim involvement.

Polygon frames the incident as the latest in a wave of cyberattacks on game studios, with Rockstar Games taking "the brunt of it" — hacked by ShinyHunters in September, by Cyberleeks before that (which released stolen GTA 6 gameplay footage), and suffering a major breach years prior that revealed an early development build.

KitGuru notes similar attacks on GSC Game World, CD Projekt Red and Insomniac Games led to delays in current projects. IGN adds that this month Capcom saw 196 customer accounts compromised, amid what security experts have dubbed "Black October" for AI-driven security disruption.

Warhorse said it will not conduct interviews or provide additional comments, and will share further verified information as it becomes available — Rock Paper Shotgun notes the studio has gone public at an earlier stage than, for example, Capcom did with its Capcom ID data breach.

Neither the impact on player data nor the motives are known yet; Metro speculates the attack may have targeted assets or details related to the Lord of the Rings project. Fans can expect the next official word only once the investigation produces concrete conclusions.