123 Reg suffered an AI-driven cyberattack on September 18. Attackers accessed customer names, phone numbers, countries, and account details. VAT numbers and product information from an API were also exposed. The company suspects a China-nexus attacker. IP addresses and AI attack skills were hosted in China and Singapore. The same group may have targeted South Korean financial institutions using ARTEX. 123 Reg reported the incident to law enforcement and regulators. It worked with Singapore ISPs to disrupt the attack. Customers were advised to enable two-step verification. The company warned of potential phishing attempts.
What changed
No prior public disclosure of AI-driven attacks on 123 Reg.
What it unlocks
Customers can now monitor for misuse of their exposed contact and account data.
- September 18 2026 attack date
- 30 organizations targeted by same group
- October 7 2026 CrowdStrike report date
Sources