Last updated
123 Reg: Cybersecurity Incident
UK domain registrar 123 Reg disclosed an AI-driven cyberattack, ongoing since a September 18 intrusion, that exposed customer contact details, account data, VAT numbers and API-sourced product information. Early attribution points to a China-nexus actor; the company has involved law enforcement, outside cybersecurity support and data protection regulators.
Source: The Register
- Who
- 123 Reg · UK
- What happened
- UK domain registrar 123 Reg disclosed an AI-driven cyberattack, ongoing since a September 18 intrusion, that exposed customer contact details, account data, VAT numbers and API-sourced product information. Early attribution points to a China-nexus actor; the company has involved law enforcement, outside cybersecurity support and data protection regulators.
- When
- 2026-10-28
- Source
- The Register
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For 123 Reg in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: Backdrop: a 109.3 (Hot) Talent Market Index (up 7.6 on the month) with EMEA activity easing (-3.6pts).
123 Reg: 1 signal in the last 90 days.
MitchelLake in this thematic
From the MitchelLake archive
More signals across EMEA
Cybersecurity Incident · EMEA
UK Biobank →UK Biobank suffered a data breach in April in which records for all 500,000 volunteers were listed for sale on Alibaba. Its Research Analysis Platform has been locked out to over 20,000 researchers while it rebuilds security, with a phased reopening pending approvals.
Cybersecurity Incident · EMEA
University of Copenhagen →University of Copenhagen confirmed hackers accessed one of its test environments holding personal data of about 525,000 people.
Cybersecurity Incident · EMEA
Rand Mutual Assurance →Rand Mutual Assurance (RMA), the insurer handling injury claims for mineworkers and metalworkers, is investigating an alleged theft of 1.68 million claim records. A hacker claims to hold 366GB of its data.
Cybersecurity Incident · EMEA
Presidency of South Africa →The South African presidency pulled its website offline two days after the PHP project released fixes for critical flaws, pointing to a security exposure tied to the global PHP vulnerability scramble.
Cybersecurity Incident · EMEA
Anomaly →Security flaw in OpenCode AI coding agent (by Anomaly) let a malicious or hijacked MCP server execute code on developers' Windows and WSL machines at sign-in. Fixed in version 1.18.33.
Cybersecurity Incident · EMEA
Bureau of Public Enterprises →Nigeria's Bureau of Public Enterprises (BPE) exposed its website backups online for several days, a data-exposure security failure at a named government agency.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- AI Executive Search →
AI capability is being built into executive stacks, not bolted on beneath them.
- Executive Search: EMEA →
Our EMEA practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗