GoDaddy reports data breach: Data of 1.2 million customers impacted

GoDaddy, the web hosting giant, has reported a massive data breach impacting nearly 1.2 million customers, according to a filing with the US Securities and Exchange Commission (SEC). According to the filing, the company discovered the breach on November 17, 2021 with “third-party access” to its “Managed WordPress hosting environment.”

According to the filing, GoDaddy identified “suspicious activity” in the “Managed WordPress hosting environment” and then began an investigation. It relied on an IT forensics team and contacted law enforcement as well after discovering the breach.

The filing states that the unauthorised third-party access took place using “a compromised password,” and the attackers then gained access to the “provisioning system in the legacy code base for Managed WordPress.”