Involves contact details, customer relationship data, company VAT numbers and API product information. The number of affected customers was not disclosed.
Confirmed victims
- 123 Reg
Attribution
- ARTEX basis
- ARTEX is the company's own claim, and no tool evidence was published. No notice was found on its website. The only source is a customer email relayed by The Register. The CrowdStrike report of Oct 7 does not mention 123 Reg.
- Actor
- The company says strong Chinese nexus and suspects a Chinese state-sponsored group.
- Same attacker?
- The company suspects the same group that hit Korea's financial sector, which is unproven. CrowdStrike describes the Korean case as Chinese-speaking, profit-driven and unattributed, so the two are in tension.
Figures and definitions
| Disclosure date | The Register Oct 28; Seoul Economic Daily says Oct 30 |
|---|---|
| Data scope | Customer email says read-only; spokesperson says it may have been copied |
Related events
Sources (4)
- 2026-10-28 Media The Register 123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
- 2026-10-30 Media 서울경제 한국 금융권 해킹범, 영국 기업도 공격했나
- 2026-10-29 Secondary Resultsense 123 Reg discloses AI-driven breach of customer data
- 未标 Secondary AgentBeam 123 Reg AI Cyberattack: Claimed vs Verified