Security News > 2021 > November > GoDaddy data breach hits WordPress hosting services resellers
GoDaddy says the recently disclosed data breach affecting roughly 1.2 million customers has also hit multiple Managed WordPress services resellers.
GoDaddy acquired these brands after buying web hosting and cloud services companies Host Europe Group in 2017 and Media Temple in 2013.
The data breach was discovered by GoDaddy last Wednesday, on November 17 as separately revealed in a Monday filing with the US Securities and Exchange Commission, the customers' data was exposed since at least September 6, 2021, after unknown threat actors had access to the company's Managed WordPress hosting environment.
"Our investigation is ongoing, but we have determined that, on or about September 6, 2021, an unauthorized third party gained access to certain authentication information for administrative services, specifically, your customer number and email address associated with your account; your WordPress Admin login set at inception; and your sFTP and database usernames and passwords," GoDaddy told customers in data breach notification letters sent this week.
Another breach was revealed last year, in May, when GoDaddy alerted customers that hackers used their web hosting account credentials to connect to their hosting account via SSH. GoDaddy's security team discovered the breach after finding an altered SSH file in the company's hosting environment and noticing suspicious activity on a subset of GoDaddy's servers.
GoDaddy is one of the largest web hosting companies and domain registrars, providing services to over 20 million customers worldwide.
News URL
Related news
- The quiet data breach hiding in AI workflows (source)
- Hertz confirms customer info, drivers' licenses stolen in data breach (source)
- Hertz data breach: Customers in US, EU, UK, Australia and Canada affected (source)
- Landmark Admin data breach impact now reaches 1.6 million people (source)
- Entertainment services giant Legends International discloses data breach (source)
- 2025 Data Breach Investigations Report: Third-party breaches double (source)
- Yale New Haven Health data breach affects 5.5 million patients (source)
- Frederick Health data breach impacts nearly 1 million patients (source)
- Baltimore City Public Schools data breach affects over 31,000 people (source)
- VeriSource now says February data breach impacts 4 million people (source)