Rainbow Six Siege Hit by Major Security Breach; Ubisoft Completes Rollback, Reopens Servers

PHILIPPINES – Ubisoft’s Rainbow Six Siege suffered a significant security breach between December 27-28, 2025, forcing the company to take servers and the in-game Marketplace offline to contain damage. The attack, which exploited a MongoDB vulnerability, led to widespread in-game disruptions—including unauthorized distribution of virtual items and currency—before the game was reopened to all players following a completed rollback.

The breach saw hackers gain access to Ubisoft’s internal systems, with sources suggesting terabytes of internal source code repositories (covering games, tools, and SDKs from the 1990s to current projects) may have been exfiltrated. Ubisoft has not officially confirmed the source code theft, and no code has been publicly released to date. Rumors also claim up to four hacker groups were involved in the incident, which the company has confirmed was a security breach rather than a technical bug.

In-game, players reported receiving billions of R6 Credits, Renown, Alpha Packs, and even rare or unreleased skins—valued at an estimated $13 million in real-world terms. Numerous accounts, including those of streamers and potentially official ones, were hit with random or false bans, though Ubisoft later clarified that ban messages seen by players were not triggered by the company (the ban ticker had been turned off in a prior update) and that an unrelated R6 ShieldGuard ban wave was separate from the breach.

Ubisoft initially shut down Siege and the Marketplace to address the issue, later conducting a soft launch with limited access for live testing. The company faced long queue times and synchronization errors upon reopening, but these were resolved as services ramped up. In an official statement on X, Ubisoft confirmed the rollback of all transactions since 11 AM UTC on December 27 is complete.

According to Ubisoft Six Siege’s statement on X, players who did not log in between December 27 at 10:49 UTC and December 29 will see no changes to their inventory. For those who connected during that window, a small percentage may temporarily lose access to some owned items, with investigations and corrections ongoing over the next two weeks. The company also emphasized directly: “Nobody will be banned for spending credits received” during the breach.

The Rainbow Six Siege Marketplace remains closed until further notice as the company continues its investigations into the breach.