Warhorse Studios, the Czech developer behind Kingdom Come: Deliverance 2, confirmed it fell victim to a cyberattack targeting company systems and data. The studio disclosed the breach publicly but provided limited specifics about the scope or nature of the intrusion. Warhorse stated it is working to secure its infrastructure and investigate how attackers gained access.
The timing creates tension for a studio managing multiple high-profile projects. Warhorse is simultaneously developing Kingdom Come: Deliverance 2, the medieval RPG sequel launched in February 2024 to commercial success, and an unannounced Lord of the Rings open-world RPG in partnership with Embracer Group. The Lord of the Rings project represents a massive franchise opportunity and likely contains sensitive intellectual property and development assets.
Cyberattacks on game studios have escalated in frequency and sophistication over the past two years. Hackers target studios for multiple reasons: stealing unreleased game builds, extracting player data, accessing proprietary engine code, or leveraging ransomware demands. Major studios including Capcom, CD Projekt Red, and Insomniac Games have all endured significant breaches. The gaming industry remains an attractive target because studios often hold valuable pre-release content and player databases worth millions on black markets.
Warhorse's vulnerability matters because the studio operates in Prague with a smaller team compared to AAA publishers. Eastern European development studios have faced particular pressure from ransomware gangs, who often demand payment in cryptocurrency. The studio's current workload across two ambitious projects may have stretched security resources thin during the breach window.
The Lord of the Rings project specifically warrants concern. Embracer Group licensed the rights to develop multiple Middle-earth games, and stolen design documents or build files could leak development direction before official announcements. Early game footage or story details reaching the internet would damage Embracer's controlled marketing rollout. A breach could also expose licensing agreements or contract terms between Warhorse and Embracer.
Kingdom Come: Deliverance 2 launched February 13 on PlayStation 5, Xbox Series X/S, and PC. The sequel outperformed expectations commercially, selling over one million copies in its first month and becoming Warhorse's biggest commercial success. Player accounts and gameplay data from the live service component potentially sit on compromised servers.
Warhorse has not disclosed whether attackers extracted files or demanded ransom. The studio's public statement remained cautious, avoiding specifics about what systems were compromised or whether customer data was accessed. This restraint aligns with typical crisis management advice but leaves stakeholders uncertain about the breach's actual scope.
The studio's next moves carry industry implications. If Warhorse paid ransom, it sets precedent for targeting other smaller European studios. If stolen assets leak, it creates uncomfortable questions about industry security standards during a period when multiple studios have failed to prevent breaches. Warhorse's response will influence how other mid-tier developers approach cybersecurity investment.
Developers and publishers are increasingly hiring dedicated security teams, but costs remain prohibitive for studios below AAA scale. Warhorse's breach underscores a vulnerability in the industry's security posture. No developer is too small to target.