“We are sincerely sorry for this incident and the concern it causes for our customers,”

The firm claimed in a filing to the SEC that someone gained access to its Managed WordPress hosting environment back in September, but that it only recognized something was wrong last Wednesday. We also recommend that you remain vigilant for potentially fraudulent communications sent to your email address purporting to be from GoDaddy or other third parties.įor residents living in California, Colorado, Delaware, Illinois, New York, New Jersey, Oregon, Vermont, Washington, and Wyoming, please visit for additional resources that describe additional steps you can take to help protect your information, including recommendations by the Federal Trade Commission regarding identity theft protection and details on how to place a fraud alert or a security freeze on your credit file.Ĭhief Information Security Officer It was only recently that Godaddy discovered it had been hacked but it happen a month ago. If you use that same password for other accounts, we recommend you change your password to those accounts and adopt data security best practices, such as choosing a strong unique password, regularly changing it, and enabling multi-factor authentication where available. Our investigation is ongoing, but we have determined that, on or about September 6, 2021, an unauthorized third party gained access to your customer number, email address associated with your previously used Managed WordPress account and the password you first used when setting up your WordPress Admin login. On November 17, we identified suspicious activity in our WordPress hosting environment and immediately began an investigation with the help of an IT forensics firm and have contacted law enforcement. The web hosting business announced Monday that it had been hacked, and yes, customer data was taken. According to our records your Managed WordPress account is no longer active. We are writing to inform you of a security incident impacting our GoDaddy Managed WordPress environment you once purchased and used. If you previously had a managed Godaddy account it will say something like I recently had a number of customers reach out to me regarding this email that was sent last night.ĭepending on if you had a Managed WordPress account the email was slightly different. If you got an email this week from Godaddy, Domains PricedRight and other Godaddy Reseller tsoHost, Media Temple, 123Reg, Domain Factory, Heart Internet Host Europe or another Godaddy company ( Wordfence) you could be one of Godaddy’s 1 Million customers who were involved in a data breach.

Godaddy phpmyadmin update for security