Ubisoft Takes Rainbow Six Siege Offline After Holiday Hack

The tactical shooter Rainbow Six Siege experienced a significant security incident over the 2025 holiday period that forced Ubisoft to deliberately take the game offline. The breach resulted in unauthorized distribution of in-game currency and cosmetics to player accounts, creating chaos in the game's economy and requiring a complete service shutdown.

According to GamesIndustry.biz, the development team notified players of the incident on December 27. The Service Status page continued displaying warnings about unplanned connectivity, authentication, in-game store, and matchmaking issues days after the initial notification.

Here's what actually happened: hackers reportedly injected two billion credits and renown into player accounts, along with all available premium skins. That's not a typo. Two billion. If players had purchased that currency legitimately, it would have been worth approximately $13.3 million per account. The breach also triggered mass account state changes, including random bans that were later reversed for some users.

The physical reality of this breach was immediate and frustrating for players. Imagine logging into your game after a long day, only to find your account flooded with impossible amounts of currency. The in-game store became a free-for-all as players rushed to spend the unauthorized funds before anyone noticed. Then came the shutdown. No matchmaking. No store access. Just a service status page telling you everything was broken.

Ubisoft responded by intentionally shutting down the game and its online store to conduct a thorough investigation. The company promised no players would face penalties for spending the erroneously allocated funds. All transactions conducted during the breach were reverted, and a controlled soft re-launch, available only via invite, commenced on December 29.

Following the game's relaunch, Ubisoft expressed gratitude for the community's patience while they worked to address and resolve the ongoing issues. The company stated it would continue making investigations and corrections over the next two weeks. At the time of writing, details about the unauthorized party's hack remain sparse, though Ubisoft did confirm that an official R6 ShieldGuard ban wave took place independently of this specific incident.

The timing couldn't have been worse. This was the holiday period, when Ubisoft typically sees a surge in new players and marketplace activity. Journalist James Lucas, covering the story for The Gamer, noted the marketplace being disabled during Christmas means all that potential revenue is sitting on the table. Players can't buy in-game items anymore, and the company loses income during one of its most lucrative periods.

Long-term players are also affected, with some still missing purchased items after the rollback. The incident exposes a significant vulnerability in Ubisoft's backend systems. If a hacker can gain access to your backends, even with backups, your game or at least your marketplace could go offline for weeks. (This is the kind of nightmare scenario every game security team dreads.)

Gaming hacks are relatively rare but have happened before. One of the biggest was in 2011, when PlayStation Network was taken offline for 24 days. About 70 million accounts were compromised, and UK regulators fined Sony £250,000 with UK authorities saying it could have been prevented. Ubisoft itself was the victim of a 2013 hack that resulted in user account data being stolen.

The technical aftermath is messy. If Ubisoft rolls back accounts to a pre-exploit state, that's arguably the cleanest technical fix. But anyone who legitimately spent real money on the day of the breach or put time into purchases since then will be angry. If Ubisoft bans accounts that used the given currency, even if they were victims who logged in and spent it, that will wipe out trust and punish innocent players. A quick way to shrivel the player base.

If Ubisoft does nothing and lets hacked currency and items remain, it destroys the in-game economy, competitive integrity, and long-term value of cosmetics and rewards. All options have big tradeoffs. The company chose the rollback path, but the damage to player trust may take longer to repair than the technical fix.

Whether players actually return in meaningful numbers remains the real question. The holiday period is supposed to be a revenue windfall, not a security crisis. Ubisoft has the technical capability to restore service, but rebuilding confidence in the marketplace's integrity is a different challenge entirely. Time will tell if the community forgives this breach or if it becomes another cautionary tale about the fragility of live service games.

Artūras Malašauskas is an AI Systems Integrator with 20+ years of production-grade web engineering experience. He has designed, shipped, and scaled enterprise Python/PHP systems for logistics, SaaS, and public-sector clients. For the past year, he has focused exclusively on AI integrations: deploying open-source LLMs, building generative media pipelines (image, audio, video), and engineering multi-agent workflows for real production environments. His standard: reproducibility, security, cost-efficient inference—no vaporware. He documents and evaluates emerging AI tooling, separating verified capabilities from marketing noise. Technical editor at: muza-ai.eu, ai-verslas.lt, ai-naujinos.lt Connect on LinkedIn