GoDaddy Data Breach

[AGTDenton]

Worth posting for anyone with a hosted site on GoDaddy.... Even if you don't use wordpress it would be worthwhile changing all your passwords

The US Securities and Exchange Commission (SEC) has just published a “Security Incident” submitted last week by Web services behemoth GoDaddy.

GoDaddy says that on 17 November 2021 it realised that there were cybercriminals in its network, kicked them out, and then set about trying to figure out when the crooks got in, and what they’d managed to do while they were inside.

https://nakedsecurity.sophos.com/202...ordpress-site/

[AGTDenton]

Important update, the breach spread to popular resellers of GoDaddy services:

The hack that exposed the details of 1.2 million GoDaddy customers has spread to six more web hosts. As Search Engine Journal reports, the six additional web hosts are all resellers of GoDaddy's WordPress hosting services and include 123Reg, Domain Factory, Heart Internet, Host Europe, Media Temple, and tsoHost.

https://www.pcmag.com/news/godaddy-h...more-web-hosts

I have a domain with 123Reg so I've already changed my password, even though I don't use hosting facilities with them.
The fact the hackers were in the system for 6 weeks leads me to believe they have more than just Wordpress details and it's only a matter of time before they unlock other data, so I would change it regardless.