GoDaddy security breach exposes 1.2 million WordPress users' data

Parv Kohli

November 24, 2021

The web hosting company Go Daddy recently submitted a filing to the securities and exchange commission on November 22, revealing that an unauthorized third party accessed the email addresses of almost 1.2 million WordPress customers. The Chief Information Security Officer, Demetrius Comes, said that they identified suspicious activity in their Managed WordPress hosting environment and immediately began an investigation with the help of an IT forensics firm and informed law enforcement. According to the statement, the attackers could access the data of up to 1.2 million active and inactive Managed WordPress customers, which makes them vulnerable to phishing attacks. The original WordPress Admin password set at the time of provisioning was exposed along with the sFTP and database usernames and passwords.Demetrius Comes also apologized for the incident and said that they will learn from this incident and are already taking more steps to strengthen their provisioning system with additional layers of protection.

Abridged fromCyber News