GoDaddy Reveals Recent Hack Exposed 1.2 Million Accounts GA S REGULAR Menu Lifewire Tech for Humans Newsletter! Search Close GO News > Internet & Security

GoDaddy Reveals Recent Hack Exposed 1.2 Million Accounts

Passwords and email address were among the stolen information

By Cesar Cadenas Cesar Cadenas Writer California State University - Long Beach Cesar Cadenas has been writing about the tech industry since 2016 on a variety of topics like cryptocurrency, video games, the latest gadgets, and much more. lifewire's editorial guidelines Published on November 22, 2021 12:47PM EST Fact checked by Jerri Ledford Fact checked by Jerri Ledford Western Kentucky University Gulf Coast Community College Jerri L. Ledford has been writing, editing, and fact-checking tech stories since 1994. Her work has appeared in Computerworld, PC Magazine, Information Today, and many others. lifewire's fact checking process Tweet Share Email Tweet Share Email Internet & Security Mobile Phones Internet & Security Computers & Tablets Smart Life Home Theater & Entertainment Software & Apps Social Media Streaming Gaming Domain registrar and web hosting company GoDaddy revealed a recent hack that exposed up to 1.2 million people's WordPress information. According to a disclosure to the US Securities and Exchange Commission, the company revealed that an "unauthorized third party" used a compromised password to gain access to its Managed WordPress hosting environment. GoDaddy determined the hacks began on September 6, 2021. Vasily Pindyurin/Getty Images The stolen information includes the email addresses and customer numbers of both active and inactive Managed WordPress customers and admin passwords for WordPress sites. Passwords and usernames for sFTPs and databases plus SSL private keys were also exposed in the hack. GoDaddy states that an investigation is ongoing, and it’s working with law enforcement and an IT forensics firm to find out what happened. In response, the company reset all the passwords affected by the breach and is currently issuing new SSL private keys to customers. GoDaddy encouraged customers to contact the GoDaddy help center to get everything sorted out. DRAKULA IMAGES/Getty Images Unfortunately, this isn't the first time GoDaddy has been breached. In late 2020, GoDaddy employees were used in an attack on several cryptocurrency trading platforms. The company concluded its disclosure with the statement, "We will learn from this incident and are already taking steps to strengthen our provisioning system with additional layers of protection." Was this page helpful? Thanks for letting us know! Get the Latest Tech News Delivered Every Day Subscribe Tell us why! Other Not enough details Hard to understand Submit More from Lifewire How to Use Passkeys on iPhone, iPad, or Mac What Is a Cryptographic Hash Function? WhatsApp Encryption: What It Is and How to Use It Hacked Facebook Account: Immediate Recovery Steps The 5 Best Secure Email Services for 2022 How to Hack-Proof Your Wireless Router How to Encrypt Data on an Android or iOS Device What to Do If Your PSN Account Is Compromised How to Fix a Disabled iPad How to Use Google Password Checkup A Brief History of Malware Securing Your Home Network and PC After a Hack 9 Best Ways to Hide Your Identity Online How Does the Microsoft Edge Password Monitor Work? What is TLS vs. SSL in Online Security? Top 7 Ways to Make Your iPhone More Secure Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. Cookies Settings Accept All Cookies