Alleged Ubisoft breach tied to MongoDB may expose decades of source code
Insider claims a massive Ubisoft breach exposed decades of source code via a MongoDB flaw, amid Rainbow Six Siege outages. No leak yet; investigation ongoing.
Insider claims a massive Ubisoft breach exposed decades of source code via a MongoDB flaw, amid Rainbow Six Siege outages. No leak yet; investigation ongoing.
© RusPhotoBank
Reports of a major breach inside Ubisoft’s infrastructure have surfaced online, with an insider known as Pirat_Nation claiming that attackers accessed tens of terabytes of source code spanning almost the company’s entire history — from projects of the 1990s to current titles and internal SDKs.
The intrusion was said to have been enabled by a vulnerability in a MongoDB database. The timing overlapped with widespread disruptions in Rainbow Six Siege, including account locks and unauthorized purchases of in-game currency. Ubisoft later temporarily took down its servers and game store to address the fallout.
According to sources, the hackers have not released the stolen materials publicly. There has been no official confirmation of a leak from Ubisoft, though the company acknowledged a serious technical issue and launched an internal investigation. The absence of a direct statement on the breach itself invites caution, yet the response suggests the incident was anything but routine.
If these claims are validated, this could rank among the largest source code leaks in the history of the games industry, potentially affecting dozens of projects and the developer’s internal tools. The possible consequences for development and security practices would be hard to ignore.