Kingdom Come dev hit by cyberattack as Capcom take Street Fighter 5 offline

The developer behind an upcoming Lord Of The Rings game has been targeted by a cyberattack, which has put company data at risk.

Cyberattacks are unfortunately becoming increasingly common within the games industry, especially amongst high-profile developers like Rockstar and Insomniac. 

They can have dramatic consequences too, between leaking studio plans years in advance, including upcoming games, and making personal information of employees public. 

Warhorse Studios, the team behind Kingdom Come: Deliverance 2, has become the latest developer to be targeted by a cyberattack – just a few months after the team confirmed they were working on an open world Lord Of The Rings game. 

In a post on the studio’s website, Warhorse confirmed the attack involved ‘unauthorised access to company systems as well as access to company data’, and that it is working with cybersecurity experts to secure its systems and investigate the incident. 

Warhorse Studios CEO, Martin Frývaldský, said: ‘This is a serious incident for Warhorse Studios and everyone affected. Our immediate priority is to secure our systems, establish the full extent of the breach, and take the necessary steps to protect our employees, partners, and community. We are dedicating the resources needed to address this situation and will communicate further information as soon as we responsibly can.’

The extent of the cyberattack, and whether it has affected player data in any way, is unclear, but it’s likely been motivated by a desire to find assets, or details, related to The Lord Of The Rings project it is working on. 

Beyond that project, Warhorse Studios is also working on a ‘new Kingdom Come adventure’, which is expected to launch sometime before March 2028. 

Warhorse isn’t the only studio having security issues. Capcom has temporarily delisted Street Fighter 5 on PC and PlayStation 4 from stores, and taken the title offline, as it tries to ‘strengthen security’ against cyberattacks related to the game’s PHP applications. 

Last week, cyber-security organisations used AI to discover two vulnerabilities in PHP – an open source server-side programming language used in web development – leading to some panic as websites and services tried to counter any potential threats. 

Capcom confirmed last week it was performing emergency maintenance on Street Fighter 5 on PC and PlayStation 4 due to ‘the security enhancements related to the PHP programming language’, but it seems like the problem is taking longer to solve than expected. 

In an update on Tuesday, October 27, Capcom confirmed both versions are still undergoing maintenance to rectify the issue. In the meantime, Street Fighter 5 has been removed from the PlayStation Store and Steam until the issue is resolved. 

‘We sincerely apologise for the inconvenience this has caused and appreciate your patience and understanding,’ a statement on X reads.

Security issues aside, Capcom has had a splendid 2026, between the triple banger line-up of Resident Evil Requiem, Pragmata, and Onimusha: Way Of The Sword. 

Email gamecentral@metro.co.uk, leave a comment below, follow us on Twitter.

To submit Inbox letters and Reader’s Features more easily, without the need to send an email, just use our Submit Stuff page here.

For more stories like this, check our Gaming page.

Comment now

Comments

Add Metro as a Preferred Source on Google

Add as preferred source