Security News > 2021 > November > GoDaddy data breach hits WordPress hosting services resellers
GoDaddy says the recently disclosed data breach affecting roughly 1.2 million customers has also hit multiple Managed WordPress services resellers.
GoDaddy acquired these brands after buying web hosting and cloud services companies Host Europe Group in 2017 and Media Temple in 2013.
The data breach was discovered by GoDaddy last Wednesday, on November 17 as separately revealed in a Monday filing with the US Securities and Exchange Commission, the customers' data was exposed since at least September 6, 2021, after unknown threat actors had access to the company's Managed WordPress hosting environment.
"Our investigation is ongoing, but we have determined that, on or about September 6, 2021, an unauthorized third party gained access to certain authentication information for administrative services, specifically, your customer number and email address associated with your account; your WordPress Admin login set at inception; and your sFTP and database usernames and passwords," GoDaddy told customers in data breach notification letters sent this week.
Another breach was revealed last year, in May, when GoDaddy alerted customers that hackers used their web hosting account credentials to connect to their hosting account via SSH. GoDaddy's security team discovered the breach after finding an altered SSH file in the company's hosting environment and noticing suspicious activity on a subset of GoDaddy's servers.
GoDaddy is one of the largest web hosting companies and domain registrars, providing services to over 20 million customers worldwide.
News URL
Related news
- American Express credit cards exposed in vendor data breach (source)
- American Express credit cards exposed in third-party data breach (source)
- French unemployment agency data breach impacts 43 million people (source)
- 43 million workers potentially affected in France Travail data breach (source)
- Fujitsu found malware on several systems, confirms data breach (source)
- Fujitsu found malware on IT systems, confirms data breach (source)
- Fujitsu finds malware on company systems, investigates possible data breach (source)
- Yacht retailer MarineMax discloses data breach after cyberattack (source)
- OWASP discloses data breach caused by wiki misconfiguration (source)
- AT&T faces lawsuits over data breach affecting 73 million customers (source)