I just received the email below from Ubisoft. This is, of course, yet another in the long list of reasons why forcing users to connect to online services to play offline games is idiotic. I'm talking about Ubisoft's UPlay service, which you must use in order to play any newer Ubisoft games. Anyone using this service should change their UPlay password as soon as possible.
We recently found that one of our Web sites was exploited to gain unauthorized access to some of our online systems. We instantly took steps to close off this access, investigate the incident and begin restoring the integrity of any compromised systems. During this process, we learned that data had been illegally accessed from our account database, including user names, email addresses and encrypted passwords. Please note that no personal payment information is stored with Ubisoft, meaning your debit/credit card information was safe from this intrusion. As a result, we are recommending that you change the password for your account: xxxxxxxx Out of an abundance of caution, we also recommend that you change your password on any other Web site or service where you use the same or a similar password. We sincerely apologize to all of you for the inconvenience. Please rest assured that your security remains our priority. The Ubisoft team
Update: I followed the instructions in the email to change my password. I can log in on the web site, but when I go to the Account settings, it tells me I need to change my password again. I can play Far Cry 3 in Offline mode, but when I try to go online, it tells me my password is wrong. When I enter the new one, it still doesn't work. Way to go, Ubisoft. Looks like UPlay is working out really well for you.