Ubisoft’s Rainbow Six Siege was hacked, allowing attackers to manipulate player bans, distribute in-game currency, and unlock cosmetic items. The incident may be part of a larger breach involving MongoDB vulnerabilities, but official details are still pending. #RainbowSixSiege #MongoBleed
Keypoints
- Hackers exploited a security flaw to manipulate bans and distribute in-game currency in Rainbow Six Siege.
- Ubisoft temporarily shut down the game and marketplace to address the breach.
- Approximately 2 billion R6 Credits, worth around $13.33 million, were granted to players illegally.
- The breach is suspected to be linked to a MongoDB vulnerability called MongoBleed, CVE-2025-14847.
- Multiple threat groups may have targeted Ubisoft for various exploits, including source code theft and data extortion.