Ubisoft confirmed a cyberattack affecting Rainbow Six Siege in late December 2025, but the more dramatic claim that hackers stole tens of terabytes of Ubisoft source code, SDKs, and development tools dating from the 1990s to today has not been independently verified. Ubisoft said there was no indication that player personal data or source code had been compromised. Those statements describe Ubisoft’s position during its investigation; they are not the same as an independently published forensic audit.
What happened to Rainbow Six Siege?
On December 27, 2025, Ubisoft acknowledged an incident affecting Rainbow Six Siege. The company shut down the game and its Marketplace while it investigated unauthorized activity in live-game systems.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Rainbow Six Siege - Elite Edition, PlayStation 5 | $8.00 | Buy on Amazon |
| 2 |
|
Tom Clancy's Rainbow Six Siege X - Elite Edition (PS5) | $18.50 | Buy on Amazon |
| 3 |
|
Sniper: Ghost Warrior - Contracts 2 - PlayStation 5 | $24.99 | Buy on Amazon |
| 4 |
|
Tom Clancy's Rainbow Six: Siege - Deluxe (PS5) (PS5) | $24.40 | Buy on Amazon |
As an Amazon Associate I earn from qualifying purchases.
Players reported unexpected R6 Credits and other currencies, rare items appearing in inventories, altered account states, and ban or unban messages that did not reflect legitimate Ubisoft moderation actions. Some reports described extremely large currency balances, but those figures came from player observations and media reports rather than an audited Ubisoft total.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Ubisoft rolled back unauthorized transactions and changes, then restored the service after testing. It later said player inventories had been restored. The official account of the incident is available through Ubisoft’s Steam community announcement.
#1 Best Overall
- Get the Elite Edition of Rainbow Six Siege X to get access to all game modes and instantly unlock 16 additional operators!
- High stakes 5v5 attack vs. Defense - Alternate between attack and defense, adapting your approach to operators and maps. Feel the thrill and intensity of the action as you leverage next-level destruction and gadgetry to outsmart your opponents in every round.
- Tools of destruction - Destruction is more than chaos: it is a key tool for your success. Use the environment to your advantage – turn walls into windows of opportunity.
- Dual front: dynamic tactical 6v6 warfare - Engage in intense 6v6 battles, where attackers and defenders fight side by side and push to capture enemy sectors while defending their own.
- From recruit to elite - A solid onboarding journey for new players, including a new clearance level path that helps you learn the basics progressively and build the skills and confidence you need before jumping into tactical action.
In practical terms, the confirmed incident involved manipulation of live-game systems. That is serious, but it does not by itself prove that attackers accessed Ubisoft’s entire corporate network, stole historical repositories, or exfiltrated every game’s source code.
What Ubisoft officially confirmed
Ubisoft described the event as a cyberattack. Its public statements said that unauthorized credits and related changes were rolled back, that inventories were restored, and that the investigation was continuing.
Most importantly, Ubisoft said it had “no indication” that player personal data or source code had been compromised. That means Ubisoft had not found evidence of those types of compromise at the time of the statement. It should not be rewritten as an independently verified guarantee that no data was stolen.
Recommended Free Tools
Ubisoft’s later Player Protection in Year 11 update also discussed stronger account protections and additional security for important features such as Ranked play and the Marketplace.
Where the “tens of terabytes” claim came from
The claim that hackers stole a huge archive of Ubisoft material appears to have originated in social-media reporting attributed to the account Pirat_Nation and was repeated by technology websites. The allegation described “tens of TBs” of source code, SDKs, tools, and projects spanning Ubisoft’s history from the 1990s to the present.
Rank #2
- The Elite Edition includes: - Access to Quick Match, Unranked, and Dual Front game modes with a selection of operators - Access to competitive modes: Ranked playlists and Siege Cup* - Instant unlock of 16 additional operators
- Alternate between attack and defense, adapting your approach to operators and maps. Feel the thrill and intensity of the action as you leverage next-level destruction and gadgetry to outsmart your opponents in every round.
- Destruction is more than chaos: it is a key tool for your success. Use the environment to your advantage – turn walls into windows of opportunity.
- Engage in intense 6v6 battles, where attackers and defenders fight side by side and push to capture enemy sectors while defending their own.
- Access to Ranked and Siege Cup is unlocked at level 50. Dual Front mode is not supported on PlayStation 4 and Xbox One
The report did not provide an independently inspectable archive, authenticated repository listing, leak sample, named victim-side investigation, or official confirmation. The initial article repeating the allegation is available at Gizchina. A near-duplicate version appeared on Reads Alibaba, but it does not add primary evidence.
That distinction matters. A claim that attackers accessed Ubisoft systems is not proof that they exfiltrated decades of source code. Evidence would need to identify the allegedly accessed repositories or systems, explain how the volume was measured, distinguish source code from compiled files and assets, and provide material that independent researchers could authenticate.
Free tools Windows power users keep installed
One-click scans. No signup required.
Live-game manipulation is not the same as source-code theft
Cybersecurity reports often use “hack,” “breach,” and “data theft” interchangeably, but they describe different events:
- Unauthorized access: an attacker enters or uses a system without permission.
- Privilege escalation: the attacker gains more control than the initial access allowed.
- Live-service manipulation: the attacker changes inventories, currencies, bans, or other game-state data.
- Exfiltration: files or records are copied out of the environment.
- Public release: stolen files are made available for others to download.
The Siege incident provides evidence of unauthorized manipulation of live-game systems. The available evidence does not establish that historical Ubisoft source repositories were stolen or publicly released.
“Source code,” “SDKs,” “development tools,” “build files,” “assets,” internal documentation, and compiled game binaries are also not interchangeable. A credible source-code theft report would need to say which category was accessed and how the claim was verified.
Rank #3
- Sniper Ghost Warrior Contracts 2 introduces fans to a dramatic single-player campaign where the stakes are at their highest, deep inside enemy territory
- Players take on the role of Reaper, contract sniper assassin, operating in the heart of a lawless region of the Middle East along the Lebanese and Syrian borders
- Tasked with a seemingly impossible mission - to topple an insidious criminal syndicate and bring them to justice
- For the first time, Sniper Ghost Warrior Contracts 2 delivers precision long-range shooting campaign with targets over 1,000 meters away
- Developed by the same studio behind the highly celebrated original Contracts, Sniper Ghost Warrior Contracts 2 pushes boundaries with the most realistic and challenging experience that the studio has ever created
Was MongoBleed the cause?
Some reports linked the incident to MongoBleed, described as a recently disclosed MongoDB vulnerability. Other online claims suggested that one operation manipulated live Siege services while another accessed internal repositories.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesMongoBleed remains a theory, not a confirmed finding. Ubisoft has not publicly confirmed it as the intrusion vector in the cited statements. A vulnerability can be technically plausible without proving that it was used in a particular attack.
Tom’s Guide reported the MongoBleed connection, but its account should be read as reporting on an allegation. The available evidence also does not establish that the live-service manipulation and the alleged source-code theft were conducted by the same attacker, through the same access path, or as part of one operation.
Were player accounts or personal details stolen?
The verified answer is narrower than “players were hacked.” Attackers apparently obtained enough control over live-game systems to alter game-state information. Players saw unauthorized credits, items, and ban-related messages. Ubisoft said there was no indication that personal data had been compromised.
That does not establish that Ubisoft account passwords, email addresses, payment details, or other personal information were stolen. It also does not mean every player account is permanently safe. Account takeover can happen separately through reused passwords, phishing, malware, or compromised linked accounts.
Rank #4
- Tom Clancy's Rainbow Six Siege Deluxe Edition is optimized for next gen (up to 4K and up to 120FPS).
- The Deluxe Edition includes: the full game (all maps and modes)
- All 8 Operators from year 1 (Frost, Buck, Valkyrie, Blackbeard, caveira, capitao, Hibana and Echo)
- All 8 Operators from year 2 (Jackal, Mira, lesion, ying, ela, zofia, dokkaebi and vigil)
- Dive into explosive 5v5 gameplay, High stakes competition, and thrilling PvP team battles..Tom Clancy's Rainbow Six Siege features an ever-expanding experience with limitless opportunities to perfect your strategy and help lead your team to victory
The safest formulation is: Ubisoft said it had no indication that personal data or source code had been compromised, while the public evidence confirms live-game disruption and unauthorized account-state changes.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What players should do
- Do not spend or trade unexpected currency and items. Do not sell, transfer, or otherwise use credits or cosmetics that appeared without a legitimate purchase. Ubisoft said unauthorized changes would be rolled back.
- Do not trust suspicious bans or unbans. Messages shown during the incident may not have represented genuine Ubisoft moderation actions.
- Check official service information. Use the Rainbow Six Siege service-status page before treating an outage or login problem as a local connection failure.
- Change a reused Ubisoft password. This is especially important if the same password was used on another service or if the account shows unfamiliar activity.
- Enable app-based two-factor authentication where available, and review linked accounts and recent account activity.
- Contact Ubisoft Support about persistent access problems, missing legitimate items, or unauthorized account changes.
- Avoid alleged leak files and recovery tools. Files advertised as leaked Ubisoft code, cheats, free R6 Credits, or account-recovery utilities may contain malware or credential stealers.
- Do not buy, sell, share, or trade accounts. Ubisoft prohibits those activities, and they increase the risk of account theft and recovery disputes.
Why confirmed source-code theft would matter
If a source-code breach were eventually confirmed, the consequences could include easier development of cheats and exploits, exposure of server-side assumptions, discovery of hard-coded secrets, leaks of unreleased content, and the loss of proprietary engine or development-pipeline technology.
Those are general risks, not evidence that they occurred at Ubisoft. Stolen game source code can be valuable because it may reveal how game logic, authentication, anti-cheat systems, or backend services work. The 2021 theft of Electronic Arts source code illustrates why such material attracts attackers and cheat developers; WIRED examined that case.
What remains unknown
- Whether any internal Ubisoft repository was accessed.
- Whether files were exfiltrated from internal systems.
- Whether the live-service intrusion and source-code allegation were connected.
- Whether MongoBleed was involved.
- Whether any credentials or secrets required rotation.
- Whether Ubisoft will publish a fuller forensic conclusion.
Until those questions are answered with primary evidence, the “tens of terabytes” story belongs in the allegation column, not the confirmed-fact column.
Bottom line
The Ubisoft cyberattack was real: Rainbow Six Siege was disrupted, live-game data was manipulated, unauthorized changes were rolled back, and player inventories were restored. The separate claim that hackers stole decades of Ubisoft source code and development tools remains unverified. Ubisoft said it had no indication that source code or personal data had been compromised, and no cited evidence independently proves otherwise.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
