Threat
123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
First reported theregister.com
Page published
Earliest dated coverage: 28 Oct 2026 · First observed: 28 Oct 2026 · Latest dated coverage: 28 Oct 2026
Coverage timeline
Single-source incident — one report is available.
Why it matters
The 123 Reg breach highlights customer-data risks from suspected AI-assisted intrusions, although the reported AI involvement and attribution remain preliminary.
123 Reg disclosed a September 18 intrusion that compromised customer contact details, VAT numbers, account metadata, product information, and preferences. The registrar described the attack as AI-driven and cited attacker infrastructure and AI tooling suggesting a possible China nexus, but connections to previously reported Claude Code and ARTEX campaigns remain unconfirmed.