GoDaddy Hacked, 1.2M Customers at Risk of Phishing Attack
News and information from the Advent IM team.
- by Olivia Lawlor-Blackburn
- Industry News
Domain registrar GoDaddy has shared details of a serious security breach which saw the details of 1.2 million customers exposed.
In a disclosure to the US Securities and Exchange Commission, GoDaddy’s Chief Information Security Officer, Demetrius Comes, shared details of the hack. Suspicious activity was discovered on Nov. 17 in the company’s Managed WordPress hosting environment, which turned out to be a third-party using a compromised password to gain access.
Up to 1.2 million active and inactive Managed WordPress customers had their email addresses and customer numbers exposed. The third-party also gained access to the WordPress Admin password for these accounts, as well as the sFTP database username and password for active customers. For a “subset of active customers” the SSL private key was also exposed.
Read via PCmag