GoDaddy breach exposes 1.2 million customer accounts

By Scott Marlette Last updated Nov 23, 2021

The domain registrar and web hosting company GoDaddy has revealed that it suffered a data breach in which the user data of 1.2m of its customers may have been accessed.

In a filing with with Securities and Exchange Commission (SEC), the company’s chief information security officer Demetrius Comes explained that an “unauthorized third party” had gained access to its managed WordPress hosting environment.

For those unfamiliar, WordPress is a content management system (CMS) used by millions of site owners worldwide to set up blogs and websites and like other hosting providers, GoDaddy offers WordPress hosting in addition to shared hosting, VPS hosting, dedicated servers and more.

According to GoDaddy, the unauthorized person gained access to its systems around September 6 by using a compromised password. However, it wasn’t until last week on November 17 that the company discovered the breach.

Compromised user accounts

GoDaddy’s SEC filing says that the breach affects 1.2m active and inactive managed WordPress users who had their email addresses as well as their customer numbers exposed.

The company also said that the original WordPress admin password, which was created when WordPress was first installed was also exposed. With this password in hand, an attacker can access a customer’s WordPress server.

GoDaddy also revealed that active customers had their sFTP credentials and the usernames and passwords for their WordPress databases, that are used to store all of their content, exposed in the breach. However, in some cases, customer’s SSL private keys were exposed and if abused, this key could allow an attacker to impersonate a customer’s website or other services. While GoDaddy has reset customer WordPress passwords and private keys, it is currently in the process of issuing them new SSL certificates.

We’ll likely hear more regarding the details of this data breach after GoDaddy finishes conducting a full investigation into the matter.

We’ve also featured the best data loss prevention services and best database software

Via TechCrunch

For all the latest Technology News Click Here

For the latest news and updates, follow us on Google News.

Read original article here

Denial of responsibility! TechNewsBoy.com is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.