123 Reg discloses AI-driven cyberattack exposing customer data

UK domain registrar 123 Reg confirmed a September 18, 2026 intrusion it called its first 'AI-driven cyberattack,' exposing customer contact details, VAT numbers and account/product data. The company suspects a China-nexus actor using AI agentic tools such as Anthropic's open-sourced skills and the ARTEX framework.

Occurred 18 September 2026 · Disclosed 28 October 2026 · Record updated 28 October 2026

Impact

Customer contact information, related CRM data, company VAT numbers, and product/API data were exposed; attacker activity was limited to reading data but copies may have been made.

Our coverage

Incidents

123 Reg says customer data taken in 'AI-driven cyberattack'

The GoDaddy-owned UK domain registrar began notifying customers this week about a September intrusion it links to a China-nexus attacker using agentic hacking tools.

28 Oct 2026

Sources

theregister.comhttps://theregister.com/cyber-crime/2026/10/28/123-reg-discloses-ai-cyberattack-on-customer-data-suspects-china-nexus/5305936