Ubisoft Breached: Passwords Taken

Richard Henderson wrote:
 
Video game development company Ubisoft posted an article earlier today on their support site that one of their systems were compromised and gamers usernames, email addresses and encrypted passwords were stolen. There’s also a blog post with some FAQ’s and more info here.
Ubisoft is known for such popular video gaming franchises as the Assassin’s Creed and Splinter Cell series.
They claim that they do not store any transaction, credit card or other personal payment information in their systems, which as our favorite home, cooking and decorating maven Martha Stewart likes to say, is a “_good thing_”.
 
It’s not known how the attacker or attackers got in, but Ubisoft did say:

“Credentials were stolen and used to illegally access our online network. We can’t go into specifics for security reasons.”

This implies that someone at Ubisoft fell victim to a targeted spear-phishing attack and was tricked into giving up their login and password allowing the attacker to gain access to Ubisoft’s systems.