123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus

What happened: UK domain registrar 123 Reg disclosed an "AI-driven cyberattack" on September 18 that exposed customer data, and said early signs point to a China-nexus attacker. Key numbers: Intrusion dated September 18. CrowdStrike advisory CSA-261162 published October 7, 2026. ARTEX tool released July 2026. The actor reportedly targeted at least 30 organizations. Why it matters: 123 Reg notified the FTC and UK and EU data protection authorities, and worked with Singapore-based ISPs to shut down attacker servers, which it says helped disrupt the attack.

UK domain registrar 123 Reg disclosed an "AI-driven cyberattack" on September 18 that exposed customer data, and said early signs point to a China-nexus attacker.

123 Reg notified the FTC and UK and EU data protection authorities, and worked with Singapore-based ISPs to shut down attacker servers, which it says helped disrupt the attack.