I just received the email below from Ubisoft. This is, of course, yet another in the long list of reasons why forcing users to connect to online services to play offline games is idiotic. I'm talking about Ubisoft's UPlay service, which you must use in order to play any newer Ubisoft games. Anyone using this service should change their UPlay password as soon as possible.
We recently found that one of our Web sites was exploited to
gain unauthorized access to some of our online systems. We
instantly took steps to close off this access, investigate the
incident and begin restoring the integrity of any compromised
systems.
During this process, we learned that data had been illegally
accessed from our account database, including user names,
email addresses and encrypted passwords. Please note that
no personal payment information is stored with Ubisoft, meaning
your debit/credit card information was safe from this intrusion.
As a result, we are recommending that you change the
password for your account: xxxxxxxx
Out of an abundance of caution, we also recommend that you
change your password on any other Web site or service where
you use the same or a similar password.
We sincerely apologize to all of you for the inconvenience.
Please rest assured that your security remains our priority.
The Ubisoft team
Update: I followed the instructions in the email to change my password. I can log in on the web site, but when I go to the Account settings, it tells me I need to change my password again. I can play Far Cry 3 in Offline mode, but when I try to go online, it tells me my password is wrong. When I enter the new one, it still doesn't work. Way to go, Ubisoft. Looks like UPlay is working out really well for you.