I would recommend making sure you have the Authenticator on all of your platforms (Steam, Battle Net, Uplay). Last year; I had someone get into my Uplay account and played a bunch of Rainbow Six: Siege matches. I didn't have any payment method set through the platform, which I'm lucky in that case. However; I did end up getting a negative competitive