{"id":370771,"date":"2021-11-22T20:03:15","date_gmt":"2021-11-22T17:03:15","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/huge-godaddy-data-breach-exposes-over-a-million-accounts\/"},"modified":"2021-11-22T20:03:15","modified_gmt":"2021-11-22T17:03:15","slug":"huge-godaddy-data-breach-exposes-over-a-million-accounts","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/huge-godaddy-data-breach-exposes-over-a-million-accounts\/","title":{"rendered":"#Huge GoDaddy Data Breach Exposes Over a Million Accounts"},"content":{"rendered":"

“#Huge GoDaddy Data Breach Exposes Over a Million Accounts”<\/strong><\/p>\n

\n
\n
\"Hacker
ViChizh\/Shutterstock.com<\/a><\/span><\/figcaption><\/figure>\n

Another massive data breach has occurred, and this time it\u2019s hitting GoDaddy customers. In total, 1.2 million accounts were affected by the attack, leaving many people concerned about the safety of their website\u2019s private information.<\/p>\n

GoDaddy reported the breach to the Securities and Exchange Commission.<\/a>\u00a0The company explained that it detected unauthorized access to the systems where it hosts and manages WordPress servers. Because WordPress is such a popular tool for creating and managing websites, this could be a severe attack.<\/p>\n

As far as what the hackers got, active customers had their sFTP credentials stolen. This is used for file transfers. Additionally,\u00a0 usernames and passwords for WordPress databases were taken. That means the attackers could have full access to a website\u2019s content. Some users had their\u00a0SSL (HTTPS) private keys exposed, which could let the malicious attacker impersonate a website.<\/p>\n

GoDaddy has\u00a0reset WordPress passwords and private keys, so it\u2019s already taken the steps required to stock the attacker from exploiting anything with the passwords obtained. The company is in the process of generating new SSL certificates for customers.<\/p>\n

The person\u00a0used a compromised password to get into GoDaddy\u2019s systems around September 6, 2021. The company said it discovered the breach on November 17, 2021. It filed with the SEC on November 22, 2021. That\u2019s a good reaction time from GoDaddy, as it tends to take time for the company to learn exactly what happ<\/a>ened before it files anything.<\/p>\n

If you were using GoDaddy to host your WordPress website, you\u2019ll want to keep an eye on your content and change all of your passwords to make sure everything is secure.<\/p>\n<\/div>\n


\n\n<\/div>\n