3 ms·

Hey, what do you know, they still haven't acknowled the breach on their "Newsroom" page[0]. 0: https://newsroom.godaddy.net/newsroom/overview/default.aspx http

Hey, what do you know, they still haven't acknowled the breach on their "Newsroom" page[0]. 0: https://newsroom.godaddy.net/newsroom/overview/default.aspx https://newsroom.godaddy.net/newsroom/overview/default.aspx

wjamesg 5y ago
I’m not seeing it there but here is something: https://aboutus.godaddy.net/newsroom/company-news/news-details/2021/GoDaddy-Announces-Security-Incident-Affecting-Managed-WordPress-Service/default.aspx https://aboutus.godaddy.net/newsroom/company-news/news-detai...
skeeter2020 5y ago
and they won't. You can't ever get the stink of a data breach off your core website seo, so instead they will use other outlets or buy some throw away domain like "godaddyidentityprotection.net". Lord knows they can do that cheaply (though they might have trouble setting up their wordpress site!)
croutonwagon 5y ago
They are sending emails to customers. Mine is copied below the line. Here’s the rub though. We haven’t hosted any Wordpress with them, or anything for that matter. We only registered some Vanity domains with them. They aren’t even the registrar on our primary domains. ———————————————- Dear Company, We are writing to inform you of a security incident impacting our GoDaddy Managed WordPress environment you once purchased and used. According to our records your Managed WordPress account is no longer active. On November 17, we identified suspicious activity in our WordPress hosting environment and immediately began an investigation with the help of an IT forensics firm and have contacted law enforcement. Our investigation is ongoing, but we have determined that, on or about September 6, 2021, an unauthorized third party gained access to your customer number, email address associated with your previously used Managed WordPress account; and the password you first used when setting up your WordPress Admin login. If you use that same password for other accounts, we recommend you change your password to those accounts and adopt data security best practices, such as choosing a strong unique password, regularly changing it, and enabling multi-factor authentication where available. We also recommend that you remain vigilant for potentially fraudulent communications sent to your email address purporting to be from GoDaddy or other third parties. For residents living in California, Colorado, Delaware, Illinois, New York, New Jersey, Oregon, Vermont, Washington, and Wyoming, please visit https://www.godaddy.com/help/a-41004 https://www.godaddy.com/help/a-41004 for additional resources that describe additional steps you can take to help protect your information, including recommendations by the Federal Trade Commission regarding identity theft protection and details on how to place a fraud alert or a security freeze on your credit file. Thank you, Demetrius Comes Chief Information Security Officer
- deleted 5y ago
  [deleted]
- d1sxeyes 5y ago
  "If you live in a state other than California, Colorado, Delaware, Illinois, New York, New Jersey, Oregon, Vermont, Washington, or Wyoming, we're under no legal obligation to do anything to help you, so don't bother checking that help article". Seriously, why list out those specific states rather than just saying 'check our help guide available at https://www.godaddy.com/help/a-41004 https://www.godaddy.com/help/a-41004 for additional resources that describe additional steps you can take to help protect your information, including recommendations by the Federal Trade Commission regarding identity theft protection and details on how to place a fraud alert or a security freeze on your credit file.'? Just seems a bit poorly thought through.
deleted 5y ago
[deleted]

wjamesg 5y ago

I’m not seeing it there but here is something: https://aboutus.godaddy.net/newsroom/company-news/news-details/2021/GoDaddy-Announces-Security-Incident-Affecting-Managed-WordPress-Service/default.aspx https://aboutus.godaddy.net/newsroom/company-news/news-detai...

skeeter2020 5y ago

and they won't. You can't ever get the stink of a data breach off your core website seo, so instead they will use other outlets or buy some throw away domain like "godaddyidentityprotection.net". Lord knows they can do that cheaply (though they might have trouble setting up their wordpress site!)

croutonwagon 5y ago

They are sending emails to customers. Mine is copied below the line. Here’s the rub though. We haven’t hosted any Wordpress with them, or anything for that matter. We only registered some Vanity domains with them. They aren’t even the registrar on our primary domains. ———————————————- Dear Company, We are writing to inform you of a security incident impacting our GoDaddy Managed WordPress environment you once purchased and used. According to our records your Managed WordPress account is no longer active. On November 17, we identified suspicious activity in our WordPress hosting environment and immediately began an investigation with the help of an IT forensics firm and have contacted law enforcement. Our investigation is ongoing, but we have determined that, on or about September 6, 2021, an unauthorized third party gained access to your customer number, email address associated with your previously used Managed WordPress account; and the password you first used when setting up your WordPress Admin login. If you use that same password for other accounts, we recommend you change your password to those accounts and adopt data security best practices, such as choosing a strong unique password, regularly changing it, and enabling multi-factor authentication where available. We also recommend that you remain vigilant for potentially fraudulent communications sent to your email address purporting to be from GoDaddy or other third parties. For residents living in California, Colorado, Delaware, Illinois, New York, New Jersey, Oregon, Vermont, Washington, and Wyoming, please visit https://www.godaddy.com/help/a-41004 https://www.godaddy.com/help/a-41004 for additional resources that describe additional steps you can take to help protect your information, including recommendations by the Federal Trade Commission regarding identity theft protection and details on how to place a fraud alert or a security freeze on your credit file. Thank you, Demetrius Comes Chief Information Security Officer

deleted 5y ago
[deleted]
d1sxeyes 5y ago
"If you live in a state other than California, Colorado, Delaware, Illinois, New York, New Jersey, Oregon, Vermont, Washington, or Wyoming, we're under no legal obligation to do anything to help you, so don't bother checking that help article". Seriously, why list out those specific states rather than just saying 'check our help guide available at https://www.godaddy.com/help/a-41004 https://www.godaddy.com/help/a-41004 for additional resources that describe additional steps you can take to help protect your information, including recommendations by the Federal Trade Commission regarding identity theft protection and details on how to place a fraud alert or a security freeze on your credit file.'? Just seems a bit poorly thought through.

deleted 5y ago

[deleted]