Update 30/12/25 – A Ubisoft spokesperson has issued a statement with some further details and reassurances over the reports of hacking affecting Rainbow Six Siege X over the weekend.
With the game back online, Ubisoft’s investigation is ongoing, but notes that actual effects were able to be rolled back and that neither personal data or game source code was compromised.
Here’s the statement:
Rainbow Six Siege recently experienced a cyberattack causing limited disruptions, including fake ban notifications and unauthorized credit grants. While we are continuing our investigation, as of this time, there is no indication that any personal data nor source code was compromised as a result of this incident. To help resolve the issue, we initiated a temporary server shutdown and rolled back the unauthorized credit grants. Rainbow Six Siege is currently back online and players are returning to the game.
The original story follows.
Rainbow Six Siege X is now back online after the servers were shut down for over two days while Ubisoft dealt with a massive security breach. In the evening of 26th December players began to notice billions of in-game currency being added to their accounts and super rare skins being dropping into their inventories. Other players were banned, and some were unbanned.
Ubisoft have now rolled back all the data so players should have the correct amount of in-game credit, known as Renown. They state that players may find themselves in a queue to get back in to the game.
The event has kicked off a war of words between various hacking groups who are claiming they are responsible, and also that one groups have stolen the source code for every Ubisoft game. These claims seem to be an exaggeration and probably not true.
However, there is evidence to suggest that Ubisoft were not hacked at all. It is reported that Ubisoft had outsourced helpdesk support to a company in India and that an employee there was bribed to give “Panel Access” to a third party. This then gave the third party access to user accounts, ban functions and other facilities. If this is true then Ubisoft were not hacked, it was bribery and human corruption that caused the issues.
It is also reported that another group is contacting people on Telegram claiming they have their personal details from hacking Ubisoft, and they are demanding money. This appears to be a scam and they have no connection to the group that breached the Rainbow Six servers. Ubisoft have, so far, not stated that any user data was breached.
Ubisoft overhauled the decade-old tactical shooter in June of this year, renaming it Rainbow Six Siege X, and added a whole host of technical improvements, as well as transitioning the game to a free-to-play model.
Rainbow Six is also one of three games hived off to a separate Ubisoft company, along with Assassin’s Creed and Far Cry.
Source: thecybersecguru.com