UK domain registrar 123 Reg suffered a cyberattack on September 18 that exposed customer data including names, phone numbers, account details, and product information. The company described it as an "AI-driven" attack and suspects a Chinese state-sponsored threat actor, based on attacker infrastructure hosted in China and Singapore and the use of AI exploitation tools linked to Chinese actors. 123 Reg has reported the incident to law enforcement and data protection authorities, and is urging customers to enable two-step verification and remain vigilant against potential phishing attempts.
