Summary
- Warhorse Studios confirms unauthorised access to company systems and corporate data.
- The developer is investigating with cybersecurity specialists and relevant authorities.
- The attack method, affected datasets and any effect on game development remain undisclosed.
Warhorse Studios, the Czech developer behind Kingdom Come: Deliverance, has confirmed that a cyberattack gave an unauthorised party access to company systems and data. The Prague-based business is working with cybersecurity specialists to secure its environment and investigate the incident. It has not identified the attacker, the initial entry point or the precise information affected.
The company has also said it is coordinating with relevant authorities. Chief executive Martin Frývaldský described the incident as serious and said the immediate priorities were securing systems, establishing its scope and protecting staff, partners and the community. The developer has not confirmed that players’ personal information was accessed, nor has it reported that confidential game builds or source code were stolen.
A game studio’s internal networks can contain employee files, payroll systems, commercial contracts, development tooling, online services and unpublished creative assets. Those records may sit in different applications under different access privileges. Confirming access to corporate data does not identify which repositories were reached or establish that files were copied outside the organisation.
Developers also face continuity questions after an intrusion. Production involves code repositories, art assets, build systems, test environments and communication tools used by teams working across multiple projects. A security investigation may require limiting remote access, rotating credentials or checking developer workstations even where there is no evidence that the final game product or customer-facing account systems have been affected. Warhorse has not disclosed any interruption to production or an amended release schedule.
The technical investigation will have to establish how long the intruder was present and what accounts or machines were used. A suspicious session in an administrative service can have a different consequence from a compromised development workstation; logs and access records are needed to determine whether the attack spread and whether any data transfers took place. Warhorse has not specified when its investigation or any associated system-restoration work will be complete.
No ransomware operator, extortion demand or leak site has been linked to the incident by the company. No public findings establish access to unreleased games or employee records. Whether notifications are required will depend on what the investigation determines about affected information and any resulting legal obligations.
