GoDaddy hack causes data breach affecting 1.2 million customers

guest · Nov 22, 2021

GoDaddy hack causes data breach affecting 1.2 million customers
...Security Incident Affecting Managed WordPress Service
November 22, 2021
https://www.bleepingcomputer.com/ne...s-data-breach-affecting-12-million-customers/

In a data breach notification published today, GoDaddy said that the data of up to 1.2 million of its customers was exposed after hackers gained access to the company's Managed WordPress hosting environment.

The incident was discovered by GoDaddy last Wednesday, on November 17, but the attackers had access to its network and the data contained on the breached systems since at least September 6, 2021.

"We identified suspicious activity in our Managed WordPress hosting environment and immediately began an investigation with the help of an IT forensics firm and contacted law enforcement," said Demetrius Comes, GoDaddy's Chief Information Security Officer.
"Using a compromised password, an unauthorized third party accessed the provisioning system in our legacy code base for Managed WordPress.
Click to expand...

The attackers were able to access the following GoDaddy customer information using the compromised password:

Up to 1.2 million active and inactive Managed WordPress customers had their email address and customer number exposed. The exposure of email addresses presents risk of phishing attacks.

The original WordPress Admin password that was set at the time of provisioning was exposed. If those credentials were still in use, we reset those passwords.

For active customers, sFTP and database usernames and passwords were exposed. We reset both passwords.

For a subset of active customers, the SSL private key was exposed. We are in the process of issuing and installing new certificates for those customers.

Click to expand...

GoDaddy: GoDaddy Announces Security Incident Affecting Managed WordPress Service

On November 17, 2021, we discovered unauthorized third-party access to our Managed WordPress hosting environment. Here is the background on what happened and the steps we took, and are taking, in response: [...]
Click to expand...

guest · Nov 24, 2021

GoDaddy data breach hits WordPress hosting services resellers
November 24, 2021
https://www.bleepingcomputer.com/ne...ch-hits-wordpress-hosting-services-resellers/

GoDaddy says the recently disclosed data breach affecting roughly 1.2 million customers has also hit multiple Managed WordPress services resellers.

According to Dan Rice, VP of Corporate Communications at GoDaddy, the six resellers also impacted by this massive breach are tsoHost, Media Temple, 123Reg, Domain Factory, Heart Internet, and Host Europe.
Click to expand...

GoDaddy acquired these brands after buying web hosting and cloud services companies Host Europe Group in 2017 and Media Temple in 2013.

" A small number of active and inactive Managed WordPress users at those brands were impacted by the security incident," Rice told WordPress security firm Wordfence.
Hacked using a compromised password
The data breach was discovered by GoDaddy last Wednesday, on November 17, but, as separately revealed in a Monday filing with the US Securities and Exchange Commission, the customers' data was exposed since at least September 6, 2021, after unknown threat actors had access to the company's Managed WordPress hosting environment.

"Our investigation is ongoing, but we have determined that, on or about September 6, 2021, an unauthorized third party gained access to certain authentication information for administrative services, [...]" GoDaddy told customers in data breach notification letters sent this week.
GoDaddy has not yet published a public statement regarding this data breach on its website.
Click to expand...

Wordfence: GoDaddy Breach Widens to tsoHost, Media Temple, 123Reg, Domain Factory, Heart Internet, and Host Europe

Yesterday GoDaddy disclosed a massive data breach impacting over 1.2 Million customers. Today, we received confirmation from GoDaddy that multiple brands that resell GoDaddy Managed WordPress were impacted.
Click to expand...

Log in or Sign up

GoDaddy hack causes data breach affecting 1.2 million customers

guest Guest

guest Guest

Log in or Sign up

GoDaddy hack causes data breach affecting 1.2 million customers

guest Guest

guest Guest

Useful Searches