GoDaddy reveals recent security breach that exposed 1.2 million accounts

In disclosures to the Securities and Exchange Commission, the web registrar and hosting company GoDaddy revealed that it discovered that it had been hacked. The company says it discovered that an “unauthorized third party” had gained access to its managed WordPress hosting environment. Up to 1.2 million users have had their email address and customer number exposed, as well as administrator passwords for both WordPress sites hosted on the platform, as well as passwords for sFTP, databases, and SSL private keys. The document says that GoDaddy believes the breach first occurred on September 6, 2021 and that the investigation is currently ongoing. Demetrius Comes, chief information security officer, says GoDaddy is currently working with law enforcement and a private IT forensic firm. Also, it says that it has reset the relevant credentials and will work with users to issue new SSL certificates. Comes ends his statement by saying that the company, perhaps too late, will “learn from this incident” and will take steps to prevent such a violation from occurring in the future. This is far from the first time that GoDaddy has been said in the same sentence as a security breach in recent years. In 2018, an AWS bug exposed data on GoDaddy servers, and in 2020, an unauthorized person was violating 28,000 user accounts. Later last year, GoDaddy was also referenced as part of a hack that brought down multiple sites in the cryptocurrency space.

Source Link