123 Reg: "AI-driven cyberattack" exposed customer contact and account data; registrar suspects a China-nexus actor

Teaser from the source

UK domain registrar 123 Reg (owned by GoDaddy) is notifying customers that a September 18 2026 intrusion it calls "the first known AI-driven cyberattack against our company" exposed names, phone numbers, countries, language and currency preferences, account creation dates, products on the account, marketing preferences and company VAT numbers, plus product information from an API. The company says the attacker's activity was limited to reading data but copies may have been made. It traced core attacker infrastructure to China and Singapore, found AI attack "skills" on it (including copies of skills open sourced by Anthropic), and suspects a link to the actor CrowdStrike tied to ARTEX attacks on South Korean financial firms. Customers are told to distrust messages claiming to be from 123 Reg and to turn on two-step verification.

This is the RSS-feed teaser. Read the full article at the original source.