Kingdom Come: Deliverance studio hit with cyberattack

Warhorse Studios, the Czech developer behind Kingdom Come: Deliverance, confirmed a cyberattack on October 27. Attackers accessed company systems and data, and the studio is investigating with cybersecurity specialists.

The studio hasn’t identified the affected information or confirmed whether the incident exposed players’ sensitive information.

Key takeaways

• Warhorse is securing its systems and coordinating with the relevant authorities.
• The studio hasn’t disclosed the attackers, entry point or whether ransomware was involved.
• Fans should treat supposed leaked builds and unsolicited account-security messages with caution.

Warhorse investigates access to internal systems

Warhorse acknowledged the attack in a message to players on its official social account. The statement supplied with this article says the studio is working with cybersecurity specialists to understand what happened and secure its systems.

A fuller company statement confirms unauthorized access to both corporate systems and company data. Warhorse says it is coordinating with the relevant authorities.

“This is a serious incident for Warhorse Studios and everyone affected,” CEO Martin Frývaldský said.

Frývaldský said the immediate response focuses on securing systems, establishing the breach’s scope and protecting employees, partners and the community. The studio says it will release further verified information when available and isn’t providing additional comments or interviews during the investigation.

CzechCrunch reported the incident on October 27, citing Frývaldský and the company’s confirmation of access to internal data.

What information did the attackers access?

Warhorse’s disclosure doesn’t specify the data involved. It doesn’t establish that attackers obtained player credentials, payment details, employee records, source code or unreleased game assets.

Access to company data also doesn’t, by itself, establish that attackers copied it or published it online. The studio hasn’t described the entry method, identified a threat actor, or disclosed a ransom demand.

Those distinctions matter for players deciding what to do next. The available statement doesn’t establish that owning or playing Kingdom Come: Deliverance has compromised someone’s gaming account or device. Further disclosures could change the assessment.

Watch for messages claiming to offer leaks or security fixes

Public attention around a studio breach can give scammers a convincing subject for a message. A supposed leaked build, emergency patch or account-verification request deserves scrutiny, particularly if it arrives through a direct message or an unfamiliar download site. These are precautionary scenarios, not confirmed campaigns linked to the Warhorse incident.

Bitdefender has documented gaming scams involving fake giveaways, developer impersonation and malware disguised as mods or cheats. Some campaigns use hijacked social accounts to make malicious links appear credible.

A familiar logo or a large follower count therefore shouldn’t decide whether you trust a download. Verify the announcement through a channel you reach independently.

What Kingdom Come players should do now

Start with the studio’s official announcements and your gaming platform’s own security controls:

• Check updates directly. Visit Warhorse’s website or official social profile yourself rather than following links in unsolicited messages.
• Avoid supposed leaked builds and unofficial fixes. Don’t run a file simply because someone claims it came from the breach.
• Protect your gaming and email accounts. Use different passwords and enable multifactor authentication where available.
• Keep authentication codes private. Don’t share them with anyone claiming to investigate the incident or restore your account.

If you entered a password on a suspicious page, change it through the genuine service and replace it anywhere you reused it. Review active sessions and use the service’s controls to sign out unfamiliar devices.

If you ran a suspicious download, scan your device and use a trusted device to secure your accounts.

For protection against malicious downloads and phishing pages, Bitdefender Total Security provides malware and anti-phishing defenses, with features varying by platform. Check any message requesting account action against an announcement you find independently.

FAQ

Did the Warhorse attack expose player data?

The studio hasn’t identified the affected data categories. Its disclosure confirms access to company data but doesn’t establish that player information was involved.

Was this a ransomware attack?

Warhorse hasn’t disclosed ransomware involvement or a ransom demand.

Should I change my Steam password because of the incident?

The disclosure alone doesn’t establish that Steam credentials were exposed. Change your password if you reused it on an affected service, entered it on a suspicious page or see signs of unauthorized access.