I just received the email below from Ubisoft. This is, of course, yet another in the long list of reasons why forcing users to connect to online services to play offline games is idiotic. I'm talking about Ubisoft's UPlay service, which you must use in order to play any newer Ubisoft games. Anyone using this service should change their UPlay password as soon as possible.

We recently found that one of our Web sites was exploited to
gain unauthorized access to some of our online systems. We
instantly took steps to close off this access, investigate the 
incident and begin restoring the integrity of any compromised 
systems. 

During this process, we learned that data had been illegally 
accessed from our account database, including user names, 
email addresses and encrypted passwords. Please note that 
no personal payment information is stored with Ubisoft, meaning 
your debit/credit card information was safe from this intrusion. 

As a result, we are recommending that you change the 
password for your account: xxxxxxxx 

Out of an abundance of caution, we also recommend that you 
change your password on any other Web site or service where 
you use the same or a similar password.  

We sincerely apologize to all of you for the inconvenience. 
Please rest assured that your security remains our priority. 

The Ubisoft team 

Update: I followed the instructions in the email to change my password. I can log in on the web site, but when I go to the Account settings, it tells me I need to change my password again. I can play Far Cry 3 in Offline mode, but when I try to go online, it tells me my password is wrong. When I enter the new one, it still doesn't work. Way to go, Ubisoft. Looks like UPlay is working out really well for you.