GoDaddy

Summary

GoDaddy identified that a security incident occurred on October 19, 2019, affecting approximately 28,000 customers. The breach was discovered on April 23, 2020 after the security team was alerted to suspicious activity in which an altered Secure Socket Shell (SSH) file was discovered in GoDaddy’s hosting environment. The unauthorized user was able to access customers’ hosting account credentials via SSH; however, the user did not gain access to customers’ main GoDaddy accounts. GoDaddy notified affected users shortly after discovery, manually reset affected account credentials, and provided users with instructions to regain access. Additionally, GoDaddy is providing affected customers with one year of security and malware removal services at no cost. Users are reminded to enable strong, unique passwords and establish multi-factor authentication. Further details can be found in the Tech Republic article.