Controversies

Company response

• Investigation — GoDaddy

  We identified suspicious activity in our Managed WordPress hosting environment and immediately began an investigation with the help of an IT forensics firm and contacted law enforcement

Source excerpt

• The company said the incident was discovered on November 17 and the third party accessed the system using a compromised password.

• GoDaddy Inc said on Monday email addresses of up to 1.2 million active and inactive Managed WordPress customers had been exposed in an unauthorised third-party access.

• GoDaddy reveals the breach in the above-mentioned SEC filing and announced that it had blocked the unauthorized third party from is systems.

Company response

• Investigation — GoDaddy

  The Internet domain registrar and web hosting provider said the discovery was made on November 17, 2021, at which time they immediately began an investigation with the help of an IT forensics firm, and reached out to law enforcement.

• Remediation — GoDaddy

  GoDaddy further noted that sFTP and database usernames and passwords for active customers were also exposed, but have since been reset.

• Remediation — GoDaddy

  GoDaddy said it is in the process of issuing and installing new certificates for these customers.

Source excerpt

• The team learned that a compromised password was used to access the provisioning system in its legacy code base for managed WordPress starting on September 6.

• The attacker was able to gain access to the customer number and email address for up to 1.2 million active and inactive managed WordPress accounts.

• GoDaddy in a new filing with the US Securities and Exchange Commission revealed it recently discovered unauthorized access to its managed WordPress hosting environment, resulting in the exposure of account data belonging to as many as 1.2 million customers.

Company response

• Remediation — GoDaddy

  The unauthorized individual has been blocked from our systems

• Ongoing disclosure — GoDaddy

  we continue to investigate potential impact across our environment.

• Remediation — GoDaddy

  We have proactively reset your hosting account login information to help prevent any potential unauthorized access

• Apology — GoDaddy

  In addition to offering customers its sincere apologies

Source excerpt

• “We apologize for any inconvenience this may have caused. We have already taken and will continue to take measures to enhance our security in light of this incident,” the company says.

• We have proactively reset your hosting account login information to help prevent any potential unauthorized access; you will need to follow these steps in order to regain access.

• The company submitted a data breach notice with the California Attorney General this week, revealing that its systems were breached in October 2019.

Company response

• Apology — GoDaddy

  GoDaddy apologized Thursday

Source excerpt

• US web company GoDaddy apologized Thursday after an email that promised employees a Christmas bonus in the midst of the economic crisis turned out to be a computer security test.

• The test email sparked uproar on social media as millions of Americans have been hit hard by the economic crisis linked to the coronavirus pandemic.

Source excerpt

• On Friday in the Delaware District Court, GoDaddy Media Temple Inc. (GoDaddy), a web hosting company, filed a complaint against Anexio Data Centers, LLC, an IT service management company, for breach of contract over its purported failure to reimburse the plaintiff after it neglected to provide contractually obligated services.

• The causes of action listed in the complaint for the aforementioned conduct are breach of contract, account stated, book account, and unjust enrichment.