123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus

UK domain registrar 123 Reg said a September 18 intrusion exposed customer names, phone numbers, countries, language and currency preferences, account creation dates and products. The GoDaddy-owned company called it the first known AI-driven attack on it and pointed to China-linked infrastructure and copies of Anthropic skills and the ARTEX tool.

• Exposed data includes names, phones, countries, currencies and account products
• Attacker infrastructure was hosted in China and Singapore
• 123 Reg links the breach to a group that used ARTEX against Korean banks
• The company notified the FTC and UK and EU data regulators