GoDaddy discloses data breach impacting customers’ hosting accounts – www.computing.co.uk

GoDaddy discloses data breach impacting customers' hosting accounts

GoDaddy discloses data breach impacting customers’ hosting accounts

Domain registrar and web-hosting firm GoDaddy disclosed on Tuesday a data breach that impacted web hosting account credentials of some customers.

In a letter sent to some customers [pdf], the company said that the security incident, which happened  in October 2019, enabled an unauthorised individual to access some customers login information that is used to connect to SSH on their hosting account.

The breach was discovered after the security team spotted a suspicious activity on some of the companys servers.

The company assured customers that the breach did not impact “main customer accounts,” and there was no evidence to suggest that hackers added or modified any files on affected accounts.

The web-hosting firm has blocked the unauthorised individual from its systems and has also reset hosting account login information of affected users to prevent any potential unauthorised access in future.

The company is also offering one year of Express Malware Removal and Website Security Deluxe service at no extra cost to affected users.

Customers can use these services to scan their website for any potential security threats.

The potential impact of the security incident is currently being investigated, the company stated.

This is, however, not the first instance of a security incident exposing sensitive details of customers to cyber criminals. Last year, hackers used hundreds of stolen credentials for GoDaddy accounts to create nearly 15,000 subdomains to redirect potential victims to malicious websites.

In March, security firm KrebsOnSecurity revealed a incident in which hackers targeted a GoDaddy through spear-phishing emails and were able to modify the DNS entries for the Freelancer-owned Escrow.com.

In 2018, UpGuard Cyber Risk Team uncovered a security breach in which an unsecured Amazon Web Services (AWS) S3 bucket resulted leaking of GoDaddys internal systems data. UpGuard gave GoDaddy a chance to plug the leaks, but after five weeks, it disclosed the breach publically after GoDaddy failed to secure its confidential data.

Sorgente articolo:
GoDaddy discloses data breach impacting customers’ hosting accounts – www.computing.co.uk

User ID Campaign ID Link
d9a95efa0a2845057476957a427b0499 l-99999993 First on Search Engine
d9a95efa0a2845057476957a427b0499 l-99999994 Marketing Automation
d9a95efa0a2845057476957a427b0499 l-99999996 B2B Video Conference
d9a95efa0a2845057476957a427b0499 l-99999984 Cloudrealtime