×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Ubisoft Uplay accounts compromised and being stolen over New Years

Kodack (795456) writes | about a year ago

Security 1

Kodack (795456) writes "Ubisoft's Uplay service may have been hacked by Russian hackers. Users with strong security passwords and indeed people who had not used their accounts in months have had them stolen. Not by a trojan or keylogger. I wish Ubisoft would talk with us about it so we can find out how deep this goes but they are silent on the issue.

Many people have taken issue with Ubisoft recently. Their Uplay service in particular with some of it's games and their always on DRM have been rife for criticism. Now there is a new criticism; the Uplay account security is weak.

I woke up New Years day to find an email from Ubisoft saying my Uplay account information had been changed to an address at a playbay.su domain. The account name and email were both changed and without asking to confirm with me first. My account and all of the games on it had been stolen.

Getting online to log a ticket I found there is literally no way to do so without a Uplay account, which had been stolen. In doing some digging I found this thread http://forums.ubi.com/showthread.php/743348-Stolen-Uplay-account in which many other people had their accounts stolen around the same time by people at playbay.su and playbay.ru domains.

Ubisoft has been almost completely silent on the issue and although it is clear there has been a data breach of some sort, they have not warned their other customers.

Customers logging support tickets are being asked to call a long distance number in order to get their accounts back. As of 11 AM CST the wait time had 14 people in front of me and after 15 minutes I had only moved up 1 spot. I ended up hanging up.

Some of the users who lost their accounts are deaf and took exception to being asked to call to get their accounts back.

A google search of "Uplay account stolen" is showing a growing number of threads from many different places all created December 31st to today.

https://www.google.com/#hl=en&tbo=d&sclient=psy-ab&q=uplay+account+stolen&oq=uplay+account+stolen&gs_l=hp.12...1030.3081.0.5347.20.15.0.4.4.0.171.1206.11j4.15.0.les%3B..0.0...1c.1.D6puJjes8Bs&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&bvm=bv.1355534169,d.b2I&fp=a7e118819f5e1e5b&bpcl=40096503&biw=1920&bih=935

Security breaches are becoming an all too common problem for gamers on many different systems. In the case of Uplay though not only are you locked out of your account, you are locked out of your games. It's a different story when theft of an account involves theft of property in the form of games.

After 3 days I have yet to get my account back."

1 comment

Check for New Comments
Slashdot Account

Need an Account?

Forgot your password?

Don't worry, we never post anything without your permission.

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>
Sign up for Slashdot Newsletters
Create a Slashdot Account

Loading...