Hackers Hit Studio Behind Lord of the Rings RPG: What It Means for Players

Warhorse Studios, the team behind a role-playing game set in the Lord of the Rings universe, has confirmed it suffered a 'serious' cyberattack. The company is now investigating the extent of the damage, according to Kotaku. Details remain scarce: it is unclear which data was affected and whether any player payment information was involved.

What happened

Kotaku reports that the attack has been classified as 'serious.' The studio is investigating to assess the consequences. There has been no official statement confirming that user data fell into the hands of attackers. At this point, we have a confirmed attack, not a confirmed leak.

Why it matters if you pay by card

Game studios often store more than source code and internal documents: they hold community data such as accounts, purchase history, and linked payment methods. If the attack touched infrastructure that processes payments, players could be affected. There is no confirmation of a payment data leak yet, but it is a reminder that any service where you leave card details is a potential target.

How to reduce risks in advance

• Don't store your main card in gaming accounts. For subscriptions and purchases in foreign stores, a virtual card with a limited balance is more convenient — for example, a virtual Mastercard from VirtCardPay.
• Enable two-factor authentication wherever possible.
• Monitor bank notifications about charges and review your transaction history.

What to do if you bought a game or subscription from the studio

If you pre-ordered or purchased anything through Warhorse Studios' services, keep an eye on official statements. If a leak is confirmed, the first step is to change your password and check linked payment methods. A virtual card can be reissued or closed in minutes, without visiting a bank.

Important: as of publication, there is no confirmed information that players' payment data was affected. We separate the fact of the attack from possible consequences.

Context

The incident comes amid a wave of attacks on the gaming industry. Kotaku notes that the internet 'continues breaking.' This is not the first time studios have faced cyber threats, and it won't be the last. For players, the main takeaway is to treat payment hygiene in gaming services as seriously as in banking apps.

This material is for informational purposes only and is not financial advice.

Service names, games, and franchises are the property of their respective owners and are mentioned only to describe the payment scenario; VirtCardPay is not affiliated with them.