123 Reg says an AI-driven attack read its customer data

Evening edition, Thursday 29 October 2026

GoDaddy-owned 123 Reg says an intruder read customer records on 18 September in its first AI-driven attack. We separate evidence from the company's own assessment, then cover an ESXi flaw used as a zero-day and Ofcom's age-check assessment.

Sources

• The Register: 123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
• VINnews: GoDaddy says AI-driven cyberattack exposed website customer information
• CrowdStrike: Unknown threat actor uses AI-driven ARTEX to target South Korean finance
• CrowdStrike 2026 Legal Threat Landscape Report
• SecurityWeek: Chinese hackers quietly used low-severity ESXi logging flaw as zero-day
• Ofcom: How age checks at 16 can work to underpin the UK's social media ban

Read the written version