Kingdom Come: Deliverance 2 studio confirms cyberattack
Warhorse Studios says attackers accessed company systems and data, with an investigation and security response now under way.
Warhorse Studios, the developer behind Kingdom Come: Deliverance II, has confirmed that it was targeted in a cyberattack. The studio says the incident involved unauthorised access to its company systems and data, and that it is working with cybersecurity experts and relevant authorities to establish what happened. 1
The statement does not say what specific data was accessed, whether information has been published, or whether players’ personal details are involved. Warhorse says its investigation is continuing and that it will share further verified information when it can do so responsibly. 12
What Warhorse has confirmed
Warhorse’s official incident page says the attack gave intruders access to company systems as well as company data. The developer is securing those systems, investigating the incident and assessing its full impact. It also says cybersecurity experts and relevant authorities are involved. 1
Martin Frývaldský, Warhorse’s CEO, called it a serious incident for the studio and everyone affected. He said the immediate priorities were securing systems, determining the full extent of the breach and taking steps to protect employees, partners and the community. 12
The studio is not conducting interviews or providing additional comments while the investigation continues. That means the central facts are clear, but the consequences are not. There is currently no official confirmation that player accounts, payment details or unreleased game material were exposed.
What this means for players
At this stage, the statement is about a company security incident rather than a confirmed compromise of player accounts. Players should be wary of messages claiming to contain leaked Warhorse data, and should avoid clicking unverified links or entering credentials in response to alleged breach notices. Those are sensible precautions, not evidence that any particular player data has been stolen.
Our opinion
Warhorse’s wording is appropriately restrained. It confirms unauthorised access without guessing at the final scope, which is better than turning an active investigation into a list of unsupported claims. The most important next update will be the studio’s assessment of what data was accessed, not speculation about the attack’s origin.
For now, the useful distinction is between a confirmed intrusion and an unconfirmed player-data breach. Warhorse has confirmed the first. It has not confirmed the second, and readers should treat anyone claiming otherwise as unverified until the studio publishes more information.