In a data breach notification published today, GoDaddy said that the data of up to 1.2 million of its customers was exposed after hackers gained access to the company’s Managed WordPress hosting environment.
“Our investigation is ongoing and we are contacting all impacted customers directly with specific details. Customers can also contact us via our help center which includes phone numbers based on country.”
Up to 1.2 million active and inactive Managed WordPress customers had their email address and customer number exposed.
The company also disclosed a breach last year, in May, when it alerted some of its customers that an unauthorized party used their web hosting account credentials in October to connect to their hosting account via SSH. GoDaddy’s security team discovered that incident after spotting an altered SSH file in GoDaddy’s hosting environment and suspicious activity on a subset of GoDaddy’s servers.
Earlier in 2019, GoDaddy was found to inject JavaScript into US customers’ sites without their knowledge, thus potentially rendering them inoperable or impacting their overall performance.
GoDaddy is one of the world’s largest domain registrars and a web hosting company providing services to more than 20 million customers worldwide.
