Also exposed and now reset were secure FTP and database passwords for active customers.įinally, GoDaddy said that for 'a subset of active customers,' SSL private keys were left out for the taking. For those who have not changed their passwords since having their WordPress accounts created, the administrator password was exposed GoDaddy says it has since reset those passwords. 'Our investigation is ongoing, but we have determined that, beginning on September 6, 2021, the unauthorized third party used the vulnerability to gain access.'Īccording to the filing, the pilfered data includes email addresses and customer numbers for roughly 1.2 million Managed WordPress customers.Īdditional exposures will vary depending on user settings. 'Upon identifying this incident, we immediately blocked the unauthorized third party from our system,' GoDaddy said in the SEC filing. GoDaddy said the attacker used a compromised password to access the provisioning system in the company's legacy code base for Managed WordPress.

It was soon found that the attacker had been enjoying access on the company's network for more than two months before the intrusion was detected. After a third-party forensics investigator was called in to look at the logs, law enforcement was also brought in and the activity was determined to be the result of a network breach.

In the case of GoDaddy, the CMS is offered as a hosted, subscription-based service for GoDaddy customers.Īccording to GoDaddy, the company noticed some suspicious network activity last week in its Managed WordPress hosting environment. A popular service for publishing blogs, news sites and business pages, WordPress is a content management system (CMS) that can be used on premises or as a cloud service.

Godaddy email access in china