123 reg customer? Watch your inbox
If your website or business email is registered with 123 Reg, take extra care with your inbox over the coming weeks.
123 Reg has started emailing customers about a break-in to its systems on 18 September. The attackers could read customer names, phone numbers, the products on each account and, for businesses, VAT numbers. The company hasn't said that passwords or card details were taken.
That's exactly the information that makes a scam convincing. A fake "your domain is about to expire" email, or a phone call that already knows your name, your business and what you've bought from 123 Reg, looks far more genuine than the usual spam.
So, three things. Don't click links in any message about your 123 Reg account; go to their website yourself and log in there. Turn on two-step verification, which 123 Reg is asking every customer to do. And remember that 123 Reg says it will never ask for your password or payment details by email, text or phone.
Not sure whether your domain is with 123 Reg, or how to switch two-step verification on? Give me a ring and we'll check it together.