Warhorse Studios Confirms Cyberattack After Hackers Access Company Data

Warhorse Studios, the developer behind Kingdom Come: Deliverance, confirmed on October 27, 2026, that attackers gained unauthorized access to its systems and company data. The studio is working with cybersecurity experts and authorities to investigate the breach and assess its full impact.

In its official statement, Warhorse said its immediate priorities are securing its systems, establishing the extent of the breach and protecting employees, partners and its community.

“This is a serious incident for Warhorse Studios and everyone affected,” chief executive Martin Frývaldský said.

The studio said it is committing resources to the response and will release further verified information when it can. Warhorse is not conducting interviews or providing additional comments while the investigation continues.

The announcement establishes that intruders reached company systems and data. It does not specify when the attack happened or how long the attackers had access.

Warhorse has not identified the attackers, explained how they entered its systems or disclosed which information they accessed. Its statement also does not confirm a ransom demand or say whether employee or player information was involved.

Access to company data does not, by itself, establish that attackers copied files, published them online or encrypted systems. The available details are therefore insufficient to classify the incident as a ransomware attack.

The statement does not give players specific protective steps. Its reference to protecting the community should not be read as confirmation that player accounts were compromised.

Warhorse is developing another Kingdom Come game and a game set in Middle-earth. Embracer confirmed both projects in its August financial report, which placed the expected release of the next Kingdom Come title in the 2027/28 financial year.

Warhorse’s cyberattack statement does not announce a delay to either project. It also does not establish whether source code, unfinished game content or internal production plans were among the information accessed.

A disruption to development remains a possible consequence of a breach, but the studio has not provided enough information to assess that risk in this case.

Warhorse has not linked this incident to artificial intelligence. Its statement provides no basis for attributing the attack to Claude or any other AI tool.

The broader threat is documented. The UK’s National Cyber Security Centre says attackers use AI to lower the skill barrier for some technical tasks and increase the speed and scale of others. The agency also describes defensive applications, including finding vulnerabilities, analyzing alerts and supporting incident response.

Microsoft recently described a separate campaign in which a China-linked group used an AI framework to automate attacks targeting hundreds of organizations. AI World Today covered Microsoft’s findings on those AI-assisted attacks. That reporting concerns a different campaign and does not establish a connection to Warhorse.

AI developers are responding to these risks. Moonshot says it removed some attack-related training data to limit the hacking capabilities of Kimi K3.1 Pro, while retaining the model’s broader coding abilities.

For Warhorse’s employees, partners and players, the next substantive update will need to clarify which data the attackers reached and whether anyone needs to take protective action.