Something went wrong. Try again later

Giant Bomb News

124 Comments

Everyone Should Change Their Uplay Password

Ubisoft admits to security exploit, meaning it’s time to mix up letters and numbers.

No Caption Provided

Is it time to finally invest in 1Password? Maybe so. Ubisoft has revealed new details about a recent website exploit that exposed its account database, including “user names, email addresses and encrypted passwords.”

“We recently found that one of our Web sites was exploited to gain unauthorized access to some of our online systems,” said the company in a statement on its forums. “We instantly took steps to close off this access, to begin a thorough investigation with relevant authorities, internal and external security experts, and to start restoring the integrity of any compromised systems.”

Encrypted passwords means the passwords themselves were not exposed in their pure form, but if a particular password isn’t very strong, it wouldn’t take much trouble for it to be deciphered.

Ubisoft said payment information was not exposed, so your debit and credit card should be safe.

If your Uplay password is one shared among other web services, it’s time to change all of those, too.

Patrick Klepek on Google+

124 Comments

Avatar image for rjayb89
rjayb89

7813

Forum Posts

9437

Wiki Points

0

Followers

Reviews: 0

User Lists: 17

Jesus, their site loads so slowly for me.

Avatar image for chikin_n_rofls
chikin_n_rofls

157

Forum Posts

170

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Ugh.

Avatar image for iamjohn
iamjohn

6297

Forum Posts

13905

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

Edited By iamjohn

These publisher-exclusive services sure are great and necessary, you guys.

Avatar image for jimmyfenix
jimmyfenix

3941

Forum Posts

20

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

i cant change my password it says cookies aren't enabled on my browser but i checked chrome and cookies are enabled :/

Avatar image for spitznock
Spitznock

1215

Forum Posts

126

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Who_watches_the_Watch_Dogs?!?!

Avatar image for benderunit22
benderunit22

1978

Forum Posts

9567

Wiki Points

0

Followers

Reviews: 6

User Lists: 1

Edited By benderunit22

Thanks, François Hollande.

Avatar image for coaxmetal
coaxmetal

1835

Forum Posts

855

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

I like lastpass better than 1password

Avatar image for aviar
Aviar

504

Forum Posts

25

Wiki Points

0

Followers

Reviews: 0

User Lists: 3

Yup, just got the email on this. I was thinking about starting to use Lastpass and this may finally push me to use it.

Avatar image for ronald
Ronald

1578

Forum Posts

28

Wiki Points

0

Followers

Reviews: 0

User Lists: 8

Well, fortunately I have only used Uplay for getting in game items. Still a pain to have to change my password. Fucking hackers.

Avatar image for metal_mills
metal_mills

3604

Forum Posts

4049

Wiki Points

0

Followers

Reviews: 10

User Lists: 3

Fuck, I don't remember my pw. It could be used on any other site for all I know.

Avatar image for superkenon
Superkenon

1730

Forum Posts

1141

Wiki Points

0

Followers

Reviews: 0

User Lists: 8

Edited By Superkenon

@rjayb89 said:

Jesus, their site loads so slowly for me.

It's not accustomed to the load of 5+ people.

Avatar image for linkster7
linkster7

1371

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

I'm just gonna hope I don't use what ever password I use there anywhere else, and then pretend I never saw this. That'll work right?

Avatar image for deactivated-60a530ec4d635
deactivated-60a530ec4d635

182

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

I find it always funny that when stuff like this happens, your payment information and credit card number always seem to be "unexposed".

Those must receive some added level of security than I guess. If that's the case, why can't they use that security to keep my password from being stolen/copied in the first place.

Avatar image for librorumprohibitorum
LibrorumProhibitorum

443

Forum Posts

18

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#girlwood

Avatar image for karlpilkington
KarlPilkington

2844

Forum Posts

824

Wiki Points

0

Followers

Reviews: 0

User Lists: 13

Avatar image for tennmuerti
Tennmuerti

9465

Forum Posts

1

Wiki Points

0

Followers

Reviews: 1

User Lists: 7

Edited By Tennmuerti

I've lost count of all the places that have exposed my information :/

Avatar image for fishmicmuffin
fishmicmuffin

1071

Forum Posts

702

Wiki Points

0

Followers

Reviews: 0

User Lists: 6

Well I couldn't find a way to change passwords from within the Uplay client, so dealing with their super slow website was unfortunate.

Avatar image for coverlesstech
CoverlessTech

774

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Site down? Can I just shutdown my Ubi account and purge all information?

Avatar image for damswedon
damswedon

3246

Forum Posts

1809

Wiki Points

0

Followers

Reviews: 3

User Lists: 12

Hey guys who may have my password, can you tell me what my password was?

Avatar image for fargofallout
fargofallout

435

Forum Posts

140

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@iamjohn: They've certainly convinced me of their usefulness.

Avatar image for theht
TheHT

15998

Forum Posts

1562

Wiki Points

0

Followers

Reviews: 1

User Lists: 9

God, I don't even remember what permutations of what passwords are shared between all the particular services I don't give a shit about.

Avatar image for clonedzero
Clonedzero

4206

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

I dont even remember my Uplay info. Whats it even for? I think an AC game made me sign up for it or something i dont remember.

Avatar image for cloudyimpulse
cloudyimpulse

265

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By cloudyimpulse

Yeah I just got the email as well and was going to post on this forum page if no one had. Fantastic! Figured it was legit when it came in since the email address forwarder I used was ONLY used for Ubisoft to play Anno 2070.

Avatar image for andygazi
andygazi

111

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Hmmmm...

ubi.com is currently under maintenance.

Avatar image for cloudyimpulse
cloudyimpulse

265

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By cloudyimpulse

@clonedzero: I got a direct link that ask me to change my password (without requiring my old one). So I guess you would just need to know the email address you signed up with.

Avatar image for zaapp1
Zaapp1

716

Forum Posts

556

Wiki Points

0

Followers

Reviews: 0

User Lists: 9

You should swap your password...by the way our password changing site is down.

Avatar image for optix12
Optix12

695

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

@jimmyfenix: Yea I had that problem when a few months ago. It was the worst as I couldnt figure it out, I think clear your cache and stuff and it may reset?

At least in this its saying encrypted passwords rather than just flat out email address directly linked with password in plain sight.

Avatar image for thehbk
TheHBK

5674

Forum Posts

0

Wiki Points

0

Followers

Reviews: 3

User Lists: 6

Edited By TheHBK

I don't even remember signing up. Think it was just when I popped in Assassin's Creed 2 into my xbox and it linked my XBL account?

Avatar image for sin4profit
Sin4profit

3505

Forum Posts

1621

Wiki Points

0

Followers

Reviews: 37

User Lists: 2

Edited By Sin4profit

Site's down, can't change password.

Uplay, even when not playing games you find a way to be a complete piece of shit.

(update) got the e-mail and was able to reset the password that way, check your spam folders.

Avatar image for meatsim
MeatSim

11201

Forum Posts

150

Wiki Points

0

Followers

Reviews: 0

User Lists: 23

Edited By MeatSim

I don't remember ever putting credit card info into Uplay.

Avatar image for tourgen
tourgen

4568

Forum Posts

645

Wiki Points

0

Followers

Reviews: 4

User Lists: 11

Edited By tourgen

God I hate these publisher login/online drm "services". They're always halfassed.

Avatar image for deactivated-64b8656eaf424
deactivated-64b8656eaf424

1450

Forum Posts

12205

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Console U-play probably doesn't count? I mean, that's just linked to your gamertag anyway, there's no password involved there, as far as I recall.

Right?

Avatar image for undeadpool
Undeadpool

8428

Forum Posts

10761

Wiki Points

0

Followers

Reviews: 20

User Lists: 18

Show of hands, how many people's first thought what "Wait, what IS my uPlay password??"

Avatar image for shivoa
Shivoa

1602

Forum Posts

334

Wiki Points

0

Followers

Reviews: 1

User Lists: 6

Edited By Shivoa

Ubi site FAQ about the breach is dated last Friday. Nice of them to publish the 'oh God, change your password' note then but not tell those hacked or the press until today.

Avatar image for icicle7x3
icicle7x3

1280

Forum Posts

1260

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By icicle7x3

Show of hands, how many people's first thought what "Wait, what IS my uPlay password??"

*raises hand*

Avatar image for thebigzed
THEBIGZED

304

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Oh great. If you're going to require people to use your shitty service at least make it safe.

Avatar image for confusedowl
confusedowl

1245

Forum Posts

453

Wiki Points

0

Followers

Reviews: 0

User Lists: 6

This is the future people. Where all your games can be easily be stolen.

Avatar image for jamesjeux007
JamesJeux007

586

Forum Posts

1785

Wiki Points

0

Followers

Reviews: 15

User Lists: 0

And that's why, of the 4 different passwords I use when creating accounts, uPlay had the "even-if-you-happen-to-know-this-password-it's-nothing-important-anyway" one.

Avatar image for winternet
Winternet

8454

Forum Posts

2255

Wiki Points

0

Followers

Reviews: 0

User Lists: 6

The thing is, I probably have an uplay account that I don't even know/remember.

Avatar image for mrmazz
MrMazz

1262

Forum Posts

0

Wiki Points

0

Followers

Reviews: 2

User Lists: 1

Edited By MrMazz

Or you know just never have a Uplay account because it's terrible.

Avatar image for ben_h
Ben_H

4859

Forum Posts

1628

Wiki Points

0

Followers

Reviews: 1

User Lists: 5

Edited By Ben_H

Changed it. Luckily I didn't use that password for anything else so I don't have to worry. I already had to change a ton of passwords once because of Battlenet, I don't want to do that again.

Avatar image for bribo
Bribo

738

Forum Posts

2

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

@parsnip: I got an email. Console uPlay totally counts.

Avatar image for moonshadow101
Moonshadow101

766

Forum Posts

1077

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By Moonshadow101  Online

Changed it to a completely random mash of numbers and letters. By the time I have to actually use Uplay, I will have forgotten anything else anyway.

Avatar image for geraltitude
GERALTITUDE

5991

Forum Posts

8980

Wiki Points

0

Followers

Reviews: 17

User Lists: 2

uugggh.. So tired.. of this.. garbage.

What is with this backwards thinking bullshit? Clearly passwords are useless paper shields. Is there no other way to confirm someone's identity today? It's like every other month a website is hacked and it's change the password time. Just get rid of passwords, duh.

Avatar image for negativecero
NegativeCero

3160

Forum Posts

32

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

I don't remember if I have an account either, but I may have inexplicably signed up for one while playing one of the Assassin's Creed games. Not that that matters right now because their site is "down of maintenance."

Avatar image for spraynardtatum
spraynardtatum

4384

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 1

goddammit

Avatar image for ndn_shadow
NDN_Shadow

161

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

uugggh.. So tired.. of this.. garbage.

Why can't companies get some good security. All this makes me do is lose respect for them and make me want to avoid ever having to use their shitty service again.

Avatar image for luck702
Luck702

960

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Luck702

Thank Jesus I was smart enough to not buy a single Ubisoft game in 4 years. Uplay has become more than just unnecessary, it's become a liability.

Avatar image for subyman
subyman

729

Forum Posts

2719

Wiki Points

0

Followers

Reviews: 2

User Lists: 0

Edited By subyman

I got this email earlier today and thought it may be a phishing thing. I guess I need to change my PW now :(

I don't even remember what password I used on there. Guess I get to change everything.