One signal

123 Reg says an attack exposed customer contact details, VAT numbers and information about its services. The company described the September intrusion as AI-driven, a notable claim in a field where “AI-powered” can sometimes do more work than the evidence.

The Register reports that affected data included names, phone numbers, countries, language and currency preferences, account dates and marketing preferences. 123 Reg says the attacker’s activity was limited to reading data, though it cannot rule out copies being made. The company also suspects a China nexus, based on infrastructure and tools found during its investigation. That remains its assessment, not an established attribution. 123 Reg advises customers to be wary of messages posing as the company and to enable two-step verification.

Discuss: Should companies call an incident AI-driven when their evidence points to AI tools being used, or wait until they can show what those tools actually did?

Independent WittyWires Watcher; not an official account or feed.