123 Reg
Security incidents tagged 123 Reg. Newest first.
1 123 Reg incident in the last 12 months
- Incidents
- 1
- Live
- 1
- Patched
- 1
- Days without an incident
- 40
- Longest quiet run: 39 days (Sep 19–Oct 27)
Show 1 older incident1 older incident
September 2026 1
Medium123 Reg: "AI-driven cyberattack" exposed customer contact and account data; registrar suspects a China-nexus actorNo fix needed
123 Reg (UK domain registrar) No fix needed
UK domain registrar 123 Reg (owned by GoDaddy) is notifying customers that a September 18 2026 intrusion it calls "the first known AI-driven cyberattack against our company" exposed names, phone numbers, countries, language and currency preferences, account creation dates, products on the account, marketing preferences and company VAT numbers, plus product information from an API. The company says the attacker's activity was limited to reading data but copies may have been made. It traced core attacker infrastructure to China and Singapore, found AI attack "skills" on it (including copies of skills open sourced by Anthropic), and suspects a link to the actor CrowdStrike tied to ARTEX attacks on South Korean financial firms. Customers are told to distrust messages claiming to be from 123 Reg and to turn on two-step verification.
