On November 22, 2021, GoDaddy disclosed a massive data breach impacting over 1.2 million customers. GoDaddy has confirmed that multiple brands that resell GoDaddy Managed WordPress were impacted.
The brands impacted include:
According to Dan Rice, VP of Corporate Communications at GoDaddy,
“The GoDaddy brands that resell GoDaddy Managed WordPress are 123Reg, Domain Factory, Heart Internet, Host Europe, Media Temple, and tsoHost. A small number of active and inactive Managed WordPress users at those brands were impacted by the security incident. No other brands are impacted. Those brands have already contacted their respective customers with specific detail and recommended action.”
tsoHost, 123Reg, Domain Factory, Heart Internet, and Host Europe were acquired by GoDaddy as part of Host Europe Group in 2017, while Media Temple was bought by GoDaddy in 2013.
The Notice of Security Incident email was sent by Media Temple:
As well as a copy of the Notice of Security Incident email sent by tsoHost:
All of the impacted hosting providers are using URLs starting with
https://myh.secureserver.net/#/hosting/mwp/v1/
for provisioning, account management, and configuration of their Managed WordPress offerings, and store sFTP passwords that can be retrieved in plaintext:
As this is a developing story, we will continue to provide more information as it becomes available. To receive updates, you can join our mailing list by allowing us to send you notifications.
References:
2. https://mediatemple.net/blog/press/godaddy-acquires-mt-media-temple-to-accelerate-web-pro-expertise/
