Ubisoft

Summary

Ubisoft experienced a security breach in its Rainbow Six Siege service that allowed attackers to distribute free in‑game currency, skins and charms, disrupted authentication, matchmaking and the marketplace, and forced the temporary shutdown of the game’s servers. After restoring access, the company reported that players who logged in during the incident might see temporary item losses while the marketplace remained offline and investigations continued. A subsequent wave of outages brought fake sanction notifications and connectivity issues across platforms, indicating that the initial compromise had not been fully resolved.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On December 27, 2025, attackers infiltrated Ubisoft’s Rainbow Six Siege and seized control of several core game functions. They manipulated the ban system, turning ban announcement pop‑ups into a looping meme ticker, and distributed approximately two billion in‑game credits along with an equivalent amount of the renown clout points. All skins and cosmetic items were made available to every player regardless of purchase or progression. In response, Ubisoft took the game’s servers and the associated marketplace offline while engineers began rolling back the unauthorized purchases and restoring normal operations. The company announced on X that players would not be punished for spending the credits that had been granted by the attackers. Engineers continued the rollback process throughout December 28, working to return the game to its pre‑incident state. By the end of December 28, the servers remained offline as the repair effort continued. Ubisoft’s statement on X indicated that investigations and corrections would proceed over the next two weeks.

On December 29, 2025, Ubisoft reported that the Rainbow Six Siege servers were back online, although the marketplace remained offline despite the completed rollback. Players who had not logged into the game between December 27 and December 29 were told they would see no impact on their inventories, while those who had logged in during that window might experience temporary loss of access to some items. The company reiterated that investigations and corrective actions would continue for the following two weeks. A week later, on January 4, 2026, Ubisoft’s service status page showed degraded connectivity across all platforms, with outages reported for authentication, the in‑game store, and matchmaking. Players on social media reported receiving notifications claiming large numbers of reports had led to sanctions or suspensions for extended periods, and others reported being kicked from the game without explanation. As of that date, neither the Rainbow Six Siege nor the main Ubisoft X accounts had posted any statement addressing the new issues. Ubisoft indicated that its ongoing investigation would continue to address the recurring problems.

Sources

Sources available to members: 3 sources.