123 Reg says suspected AI-driven attack exposed customer details
UK domain registrar 123 Reg says an intrusion on 18 September exposed customer data in what it describes as its first known AI-driven cyberattack. The company suspects a China-linked actor may be responsible, but has not confirmed who carried it out; the incident matters because attackers may have copied information that could be used in scams.
The exposed data includes customers’ names, phone numbers, countries, language and currency preferences, account creation dates, products, marketing preferences, company VAT numbers and related account information. 123 Reg says the attackers’ activity was limited to reading data, though copies may have been made. It reported the incident to law enforcement and regulators, brought in external security specialists, and advised customers to be wary of messages claiming to be from the company and to enable two-step verification.
In short
- 123 Reg says an AI-driven attack exposed customer data.
- The intrusion took place on 18 September.
- The company suspects a China-linked actor, but has not confirmed attribution.
Explained simply
123 Reg is a UK company that registers website names, such as those ending in .co.uk, and sells related online services. Its customers include people and businesses that use these services to establish and manage websites.
A cyberattack is an attempt to access or disrupt computer systems without permission. Here, 123 Reg says someone accessed customer account information; it suspects the attack may have involved artificial intelligence and may be linked to China, but neither the method nor who was responsible has been confirmed.
Customer details can help criminals make convincing scam messages that appear to come from a trusted company. The incident has therefore raised questions about how businesses protect personal information and how customers can spot messages asking them to share details or take action.
Americas Art Asia Business Companies Culture Cybersecurity Technology World
Read the full article at the source →
Originally published by The Register as “123 Reg discloses ‘AI cyberattack’ on customer data, suspects China nexus”.