According to a notice posted by a customer, a third party read W+M profile and settings data through an API on the same day. GoDaddy has not confirmed a link to the 123 Reg incident.
Confirmed victims
- GoDaddy Websites + Marketing
Attribution
- ARTEX basis
- GoDaddy did not name ARTEX and did not confirm it was the same operation as 123 Reg.
- Actor
- third party (not named).
- Same attacker?
- Not confirmed.
Related events
Sources (2)
- 2026-10-28 Media The Register 123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
- 不晚于 2026-1 Secondary Tomsher Technologies GoDaddy AI Cyberattack 2026, What Was Exposed and What to Do