by DABK
9 replies
If you have accounts on GoDaddy, you might want to change passwords in a hurry.

https://www.wordfence.com/blog/2021/11/godaddy-breach-plaintext-passwords/

>>Moderator edited link>>
#breached #godaddy #security breach
Avatar of Unregistered
  • Profile picture of the author WF- Enzo
    Administrator
    Damn. Pretty sure it's not just 1.2M accounts

    During the period from September 6, 2021, to November 17, 2021, the sFTP and database usernames and passwords of active customers were accessible to the attacker.
    Signature
    {{ DiscussionBoard.errors[11686623].message }}
  • Profile picture of the author rearise
    this is scary, thanks for the news!
    {{ DiscussionBoard.errors[11686772].message }}
  • Profile picture of the author Mark Singletary
    This has expanded, according to Wordfence to other GoDaddy owned hosting: tsoHost, Media Temple, 123Reg, Domain Factory, Heart Internet, and Host Europe.

    They have such wide reach that isn't so obvious, so whoever you are hosting with, it might be a good time to update your passwords.

    I use BitWarden to help me choose strong passwords and to keep them secure so i don't forget them. I have also used LastPass. I have no clue what most of my passwords are, but I don't need to because the password managers help.

    Mark
    {{ DiscussionBoard.errors[11686790].message }}
  • Profile picture of the author hbeezy
    I still have an account with them but I did transfer out all of my domains.

    I suggest namecheap for a domain registrar in my opinion.

    Sucks to hear of this happening though. I'm starting to believe holding an account with anyone isn't safe anymore since everyone's getting hacked.
    {{ DiscussionBoard.errors[11686919].message }}
    • Profile picture of the author max5ty
      Originally Posted by hbeezy View Post

      I still have an account with them but I did transfer out all of my domains.
      Right now I don't think they can get any slower at transferring domains. Had some on pending status for too long. Wouldn't ever recommend them.

      I'm with you on the Namecheap idea...
      {{ DiscussionBoard.errors[11686925].message }}
  • Profile picture of the author Serene Carmen
    Do you know whether they sent out an email to inform affected accounts?
    {{ DiscussionBoard.errors[11686959].message }}
  • Profile picture of the author IM2Pat
    Banned
    any updates on this since original boosting? Ive got over 20 domains there so thank you for any feedback. pat
    {{ DiscussionBoard.errors[11687224].message }}
    • Profile picture of the author Mark Singletary
      Originally Posted by IM2Pat View Post

      any updates on this since original boosting? Ive got over 20 domains there so thank you for any feedback. pat
      Did you change your passwords? This mostly affected their hosting clients, but I would change passwords just in case.

      Mark
      {{ DiscussionBoard.errors[11687226].message }}
Avatar of Unregistered

Trending Topics