Security News > 2021 > November > GoDaddy data breach hits WordPress hosting services resellers
GoDaddy says the recently disclosed data breach affecting roughly 1.2 million customers has also hit multiple Managed WordPress services resellers.
GoDaddy acquired these brands after buying web hosting and cloud services companies Host Europe Group in 2017 and Media Temple in 2013.
The data breach was discovered by GoDaddy last Wednesday, on November 17 as separately revealed in a Monday filing with the US Securities and Exchange Commission, the customers' data was exposed since at least September 6, 2021, after unknown threat actors had access to the company's Managed WordPress hosting environment.
"Our investigation is ongoing, but we have determined that, on or about September 6, 2021, an unauthorized third party gained access to certain authentication information for administrative services, specifically, your customer number and email address associated with your account; your WordPress Admin login set at inception; and your sFTP and database usernames and passwords," GoDaddy told customers in data breach notification letters sent this week.
Another breach was revealed last year, in May, when GoDaddy alerted customers that hackers used their web hosting account credentials to connect to their hosting account via SSH. GoDaddy's security team discovered the breach after finding an altered SSH file in the company's hosting environment and noticing suspicious activity on a subset of GoDaddy's servers.
GoDaddy is one of the largest web hosting companies and domain registrars, providing services to over 20 million customers worldwide.
News URL
Related news
- Dutch Police: ‘State actor’ likely behind recent data breach (source)
- Comcast and Truist Bank customers caught up in FBCS data breach (source)
- Internet Archive hacked, data breach impacts 31 million users (source)
- Internet Archive data breach, defacement, and DDoS: Users’ data compromised (source)
- Fidelity Investments says data breach affects over 77,000 people (source)
- Fidelity Data Breach Exposes Data of Over 77,000 Customers (source)
- USDoD hacker behind National Public Data breach arrested in Brazil (source)
- Tech giant Nidec confirms data breach following ransomware attack (source)
- Insurance admin Landmark says data breach impacts 800,000 people (source)
- Henry Schein discloses data breach a year after ransomware attack (source)