As cited
Copy frozen at (site build).
breaches incidents
123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
123 Reg, a UK domain registrar owned by GoDaddy, disclosed a breach on October 28, 2026, affecting customer contact information, VAT numbers, and product details following an intrusion on September 18, 2026. The company attributes the attack to a likely China-nexus threat actor who leveraged artificial intelligence (AI) tools, including open-sourced Claude code and the ARTEX penetration-testing framework, with early signs suggesting overlap with attacks on South Korean financial institutions. 123 Reg reported the incident to law enforcement, the FTC, and UK and EU data protection authorities, and worked with industry partners to disrupt the attacker's infrastructure.
Why it matters: Domain registrar customers face credential compromise and impersonation risk; practitioners managing registrar accounts should enable multifactor authentication (MFA) immediately and verify all communications directly with 123 Reg rather than through unsolicited messages.
- Source published
- First seen by Cybersecurity Tracker