{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "123 Reg: \"AI-driven cyberattack\" exposed customer contact and account data; registrar suspects a China-nexus actor · updates",
  "home_page_url": "https://pwn.watch/i/123-reg-ai-driven-cyberattack-customer-data-oct-2026",
  "feed_url": "https://pwn.watch/i/123-reg-ai-driven-cyberattack-customer-data-oct-2026/feed.json",
  "description": "UK domain registrar 123 Reg (owned by GoDaddy) is notifying customers that a September 18 2026 intrusion it calls \"the first known AI-driven cyberattack against our company\" exposed names, phone numbers, countries, language and currency preferences, account creation dates, products on the account, marketing preferences and company VAT numbers, plus product information from an API. The company says the attacker's activity was limited to reading data but copies may have been made. It traced core attacker infrastructure to China and Singapore, found AI attack \"skills\" on it (including copies of skills open sourced by Anthropic), and suspects a link to the actor CrowdStrike tied to ARTEX attacks on South Korean financial firms. Customers are told to distrust messages claiming to be from 123 Reg and to turn on two-step verification.",
  "language": "en",
  "_pwn": {
    "slug": "123-reg-ai-driven-cyberattack-customer-data-oct-2026",
    "severity": "medium",
    "status": "live",
    "patchStatus": "no-fix-needed",
    "rss": "https://pwn.watch/i/123-reg-ai-driven-cyberattack-customer-data-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/123-reg-ai-driven-cyberattack-customer-data-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/123-reg-ai-driven-cyberattack-customer-data-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/123-reg-ai-driven-cyberattack-customer-data-oct-2026#2026-10-28-c5beb86c",
      "url": "https://pwn.watch/i/123-reg-ai-driven-cyberattack-customer-data-oct-2026#2026-10-28-c5beb86c",
      "title": "123 Reg: \"AI-driven cyberattack\" exposed customer contact and account data; registrar suspects a China-nexus actor: Customers receive breach notification emails; 123 Reg tells The Register it suspects a China-nexus actor and reported the attack to law enforcement, the FTC and UK and EU data protection authorities.",
      "content_text": "123 Reg: \"AI-driven cyberattack\" exposed customer contact and account data; registrar suspects a China-nexus actor: Customers receive breach notification emails; 123 Reg tells The Register it suspects a China-nexus actor and reported the attack to law enforcement, the FTC and UK and EU data protection authorities.\n\nSource: https://www.theregister.com/cyber-crime/2026/10/28/123-reg-discloses-ai-cyberattack-on-customer-data-suspects-china-nexus/5305936",
      "date_published": "2026-10-28T00:00:00.000Z",
      "external_url": "https://www.theregister.com/cyber-crime/2026/10/28/123-reg-discloses-ai-cyberattack-on-customer-data-suspects-china-nexus/5305936",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/123-reg-ai-driven-cyberattack-customer-data-oct-2026#2026-09-18-0ce9cf87",
      "url": "https://pwn.watch/i/123-reg-ai-driven-cyberattack-customer-data-oct-2026#2026-09-18-0ce9cf87",
      "title": "123 Reg: \"AI-driven cyberattack\" exposed customer contact and account data; registrar suspects a China-nexus actor: Attacker breaks into 123 Reg systems and reads customer data, in what the company calls an AI-driven cyberattack.",
      "content_text": "123 Reg: \"AI-driven cyberattack\" exposed customer contact and account data; registrar suspects a China-nexus actor: Attacker breaks into 123 Reg systems and reads customer data, in what the company calls an AI-driven cyberattack.\n\nSource: https://www.theregister.com/cyber-crime/2026/10/28/123-reg-discloses-ai-cyberattack-on-customer-data-suspects-china-nexus/5305936",
      "date_published": "2026-09-18T00:00:00.000Z",
      "external_url": "https://www.theregister.com/cyber-crime/2026/10/28/123-reg-discloses-ai-cyberattack-on-customer-data-suspects-china-nexus/5305936",
      "tags": [
        "medium"
      ]
    }
  ]
}