Warhorse Studios Cyberattack: What Kingdom Come: Deliverance II Players Need to Know

Warhorse Studios, the Czech developer of Kingdom Come: Deliverance II, has confirmed it was hit by a cyberattack. In an official statement published on 27 October 2026, the studio said attackers gained "unauthorized access to company systems as well as access to company data." It is working with cybersecurity experts and the relevant authorities. Warhorse has not said whether any player information was involved, what data was taken or whether any of its games are affected. There is no sign that Kingdom Come: Deliverance II has stopped working on PC, PS5 or Xbox Series X|S.

Below is what Warhorse has actually confirmed, what it hasn't, what it means for players in India, and the sensible steps to take while the investigation goes on.

What Warhorse Studios announced

The statement, titled "Official Statement from Warhorse Studios Regarding Cybersecurity Incident", appeared on the studio's website on Tuesday, 27 October. Early coverage, including GamingOnLinux, was up by 12:50 p.m. UTC (6:20 p.m. IST). The key lines:

• "Warhorse Studios confirms that it has been the target of a cyberattack."

• "We are working with cybersecurity experts to secure our systems, investigate the incident, and assess its full impact."

• "The attack involved unauthorized access to company systems as well as access to company data."

• "We are coordinating with the relevant authorities as the investigation continues."

CEO Martin Frývaldský added: "This is a serious incident for Warhorse Studios and everyone affected. Our immediate priority is to secure our systems, establish the full extent of the breach, and take the necessary steps to protect our employees, partners, and community." He said the studio will "communicate further information as soon as we responsibly can."

Warhorse also said it is not giving interviews or extra comments while the investigation runs, and will share "further verified information when it becomes available." That means the statement is, for now, the only official source. Treat anything beyond it, including claims of leaked files on social media, as unverified.

Key facts at a glance

Source: Warhorse Studios official statement, 27 October 2026, as quoted by GamingOnLinux, GamesRadar+ and Polygon.

NextPlayIntel original infographic. Source: Warhorse Studios statement, 27 October 2026.

Is player data at risk?

Nobody outside the investigation knows yet. Warhorse's statement mentions its "employees, partners, and community" as people it wants to protect, but it doesn't say any player data was accessed. Polygon notes that the studio hasn't specified whether user data was part of the breach, and GamesRadar+ notes it hasn't said whether any information has been leaked online.

It helps to know how most people buy and play Kingdom Come: Deliverance II. On PC the game is sold through stores such as Steam, and on console through the PlayStation Store and Microsoft Store. Those platforms, not Warhorse, process your payment and hold your account login. The game's campaign is single-player. So a break-in at the studio is not the same as a break-in at Steam or PSN. That said, a studio can still hold some community data, such as newsletter sign-ups, support tickets or forum accounts, and Warhorse hasn't ruled anything in or out.

The bigger risk for most people in the next few weeks is likely to be phishing: scam emails or DMs that use the news to pose as Warhorse, Steam or a "refund" offer. That's a general pattern after high-profile breaches, not something Warhorse has warned about.

What it means for players in India

Kingdom Come: Deliverance II has a following in India, mostly on PC. It costs ₹3,360 on Steam India, and its story expansions are priced separately. These are the prices we saw on 28 October 2026:

Source: Steam store, India region, checked 28 October 2026, about 4 a.m. IST. Prices can change during sales.

Nothing in the statement suggests you should stop playing, delete the game or ask for a refund. Your copy is tied to your Steam, PlayStation or Xbox account, and Warhorse hasn't reported any problems with game servers, saves or downloads. If the investigation turns up player data, Indian players would expect to be told directly. That's the kind of follow-up to watch for.

What to do now, step by step

1. Read only official updates. Check Warhorse's incident page and its verified social accounts. Ignore "leak" posts until Warhorse confirms them.

2. Don't download leaked files. Archives claiming to be stolen Warhorse data are a common way to spread malware, and downloading them can also be illegal.

3. Be careful with emails and DMs. Don't click links in messages about "compensation", "free keys" or "account verification" that mention the attack. Type the store's address yourself.

4. Secure your store accounts. Turn on Steam Guard, and two-step verification on PlayStation Network and your Microsoft account. Use a unique password for each.

5. Change reused passwords. If you've ever made an account on a Warhorse website with a password you use elsewhere, change it on those other sites.

6. Keep playing normally. If the game has trouble starting for unrelated reasons, our Steam game won't launch guide and reinstall without losing saves guide can help.

Background: Warhorse and what it's working on

Warhorse is based in Prague. It made its name with Kingdom Come: Deliverance in 2018, a realistic medieval RPG set in Bohemia. The sequel, Kingdom Come: Deliverance II, launched on 4 February 2025 on PC, PS5 and Xbox Series X|S, published by Deep Silver, and has had paid expansions since. According to Game Developer, Warhorse is a wholly owned subsidiary of Fellowship Entertainment, a company spun out of Embracer Group. Kotaku and Game Developer also describe it as the studio behind an unnamed Lord of the Rings RPG.

That's why studio leaks matter even when players aren't directly affected. Stolen internal data can include staff details, contracts, source code or footage of unannounced games. The games industry has seen this before: CD Projekt Red was hit by ransomware in 2021, Rockstar Games had early Grand Theft Auto VI footage leaked after a 2022 breach, and Insomniac Games data was published after a 2023 ransomware attack. We don't know whether the Warhorse incident is anything like those. The studio hasn't said who was behind it or whether there was a ransom demand.

The news also comes during a rough patch for online security across gaming. Kotaku links it to a wider run of security problems this month, including a PHP issue that took some websites offline. That issue is also the reason Capcom gave for taking Street Fighter V offline. There's no evidence the two incidents are connected.

What's not confirmed

• Whether any player, customer or community data was accessed.

• What kind of company data was taken, and how much.

• Whether any work on future games, including the reported Lord of the Rings RPG, was exposed.

• Who carried out the attack, how they got in, and whether a ransom was demanded.

• When the attack happened. The statement gives the date of the announcement, not of the breach.

• Whether any updates, patches or DLC plans will be delayed.

We'll update this article if Warhorse shares more verified information.

Sources

• Warhorse Studios — official statement regarding cybersecurity incident (27 Oct 2026)

• GamingOnLinux — full text of the statement (27 Oct 2026)

• GamesRadar+ — CEO comment (27 Oct 2026)

• Game Developer — Warhorse and Fellowship Entertainment (27 Oct 2026)

• Polygon — user data not specified (27 Oct 2026)

• Kotaku — Lord of the Rings RPG studio (27 Oct 2026)

• Steam India — Kingdom Come: Deliverance II