While known for its domain, email, and shared hosting services, GoDaddy offers options for virtual and dedicated servers as well. The company makes it incredibly easy and affordable for folks to choose a domain name, sign up for hosting, and start building their online business or personal web property. GoDaddy ended 2022 with 20.9 million customers.GoDaddy is exceptionally well-known in the hosting space, typically serving as site owners' introduction to the world of web hosting. The company declined to answer questions or share additional information.

Information shared with GoDaddy suggests the threat actor group’s goal is to infect websites and servers with malware for phishing campaigns, malware distribution and other malicious activities. “We have evidence, and law enforcement has confirmed, that this incident was carried out by a sophisticated and organized group targeting hosting services like GoDaddy,” the company said. The company said forensics experts and law enforcement agencies are assisting with the investigation as it continues to monitor the behavior of the criminal organization and block attempts to gain further access. GoDaddy did not say how many potential customers are impacted nor what type of data might be compromised as a result of the latest breach. In March 2020, a threat actor compromised the hosting login credentials of about 28,000 hosting customers and the login credentials of some GoDaddy employees.An unauthorized party used a compromised password as part of that incident to access the provisioning system in GoDaddy’s legacy code base. In November 2021, a data breach exposed the emails and customer numbers of up to 1.2 million managed WordPress customers.The web hosting provider has disclosed several breaches in the past few years: “We believe these incidents are part of a multiyear campaign by a sophisticated threat actor group that, among other things, installed malware on our systems and obtained pieces of code related to some services within GoDaddy,” the company said.

Godaddy email access on the web