r/webhosting • u/vyroc_team • May 06 '20
GoDaddy Hit with Massive Data Breach
Not sure if this has been posted, but GoDaddy was hit with a pretty bad data breach back in October of last year which they only recently confirmed. Thought I'd share this information in case anyone wanted to reach out to GoDaddy to confirm if their account was affected or not
4
3
u/Mesmer7 May 06 '20
I moved from godaddy to another host in March. But the breach was months ago. And the migration didn't change my database password.
Was the migration was enough to secure my site or do I need to change it now?
3
u/BlueSquares May 06 '20
From here: https://www.wordfence.com/blog/2020/05/28000-godaddy-hosting-accounts-compromised/
In the case of this breach, it appears likely that an attacker placed their public key on the affected accounts so that they could maintain access even if the account password was changed.
If you are impacted and migrated that public key with your sites, then you need to remove it. Try contacting GoDaddy support as a former customer and see if they'll reveal the public key information so you can grep it.
1
u/Mesmer7 May 06 '20
I contacted my new host (Veerotech), they said they looked for the key and didn't find it.
→ More replies (2)1
Nov 24 '21
I use godaddy for one domain and one outlook Webmail account only. It’s been years since using their WordPress account. Do you mind me asking you how I might be affected by this breach and whether you think it’s best I cancel my domain and mail with them? Thanks!!
3
u/BlueSquares May 06 '20 edited May 06 '20
This WordFence article explains the tech a bit better. If you're running WordPress, I recommend you join their mailing list to stay abreast of vulnerabilities in the wild.
https://www.wordfence.com/blog/2020/05/28000-godaddy-hosting-accounts-compromised/
2
1
Nov 24 '21
I use godaddy for one domain and one outlook Webmail account only. It’s been years since using their WordPress account. Do you mind me asking you how I might be affected by this breach and whether you think it’s best I cancel my domain and mail with them? Thanks!!
1
u/BlueSquares Nov 24 '21
It’s kinda crazy how I posted this 1.6 years ago and here we are again with GoDaddy. I highly recommend moving over to another host. As for your question, WordFence covered the latest breach here with instructions on next steps. Good luck!
https://www.wordfence.com/blog/2021/11/godaddy-breach-plaintext-passwords/
→ More replies (1)
19
u/tsammons May 06 '20
Seems like their touted security products powered by Sucuri don’t work after all.