Security News > 2021 > November > GoDaddy data breach hits WordPress hosting services resellers

GoDaddy says the recently disclosed data breach affecting roughly 1.2 million customers has also hit multiple Managed WordPress services resellers.

GoDaddy acquired these brands after buying web hosting and cloud services companies Host Europe Group in 2017 and Media Temple in 2013.

The data breach was discovered by GoDaddy last Wednesday, on November 17 as separately revealed in a Monday filing with the US Securities and Exchange Commission, the customers' data was exposed since at least September 6, 2021, after unknown threat actors had access to the company's Managed WordPress hosting environment.

"Our investigation is ongoing, but we have determined that, on or about September 6, 2021, an unauthorized third party gained access to certain authentication information for administrative services, specifically, your customer number and email address associated with your account; your WordPress Admin login set at inception; and your sFTP and database usernames and passwords," GoDaddy told customers in data breach notification letters sent this week.

Another breach was revealed last year, in May, when GoDaddy alerted customers that hackers used their web hosting account credentials to connect to their hosting account via SSH. GoDaddy's security team discovered the breach after finding an altered SSH file in the company's hosting environment and noticing suspicious activity on a subset of GoDaddy's servers.

GoDaddy is one of the largest web hosting companies and domain registrars, providing services to over 20 million customers worldwide.

News URL

https://www.bleepingcomputer.com/news/security/godaddy-data-breach-hits-wordpress-hosting-services-resellers/