Ubisoft hacked?

A few days ago I received a notification that someone had attempted to access my Ubisoft account.

I quickly changed the password and went on with my normal life.

A few days later, I received notifications of login attempts on other services.

It was very strange to me since I hadn't installed any malicious software on my PC, and I have CrowdStrike and other security measures that hadn't alerted me to anything.

Looking for patterns, I realized that the accounts I was receiving alerts for had something in common: they use the same password I used in my Ubisoft account. All my other accounts, which have different passwords and would be more attractive to an attacker (for example, Steam), did not experience any hacking attempts, only those that shared the Ubisoft account password—the account that started the problem.

After investigating, I saw comments that many people who play Siege or similar games reported that Ubisoft employees were selling passwords and accounts.

I don't know if that is true, but I can say with considerable certainty that something at Ubisoft was leaked, and that password I used—which was rather uncommon and met all the security measures (uppercase, lowercase, special characters, length, etc.)—was leaked, and now they are clearly testing my leaked username and password on all possible services to see where I reused it.

So, I recommend that you change your Ubisoft password and use one that is only for Ubisoft.

Has anyone else had a similar experience?

Regards