HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedCredentialsLowContained

GODADDY.COM, LLC

bd_7d563c6e5bb978b6 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

May 3, 2020

To disclose

—

Affected

Not disclosed

Confidence

65%

Full breach record for GODADDY.COM, LLC →5 incidents on file

GoDaddy.com LLC reported that an unauthorized individual accessed SSH login credentials for a subset of web hosting accounts. The incident occurred on October 19, 2019. GoDaddy blocked the actor and reset affected credentials. No evidence of file modification was found. Main customer account data was not accessible.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 19, 2019

Begins

May 3, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: GODADDY.COM, LLC
norm: godaddycom

Name: GODADDY.COM, LLC
norm: godaddycom
Industry: Technologyllm

Discovered: —
Breach occurred: Oct 19, 2019
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Blocked the unauthorized individual from our systems
Proactively reset hosting account login information
Provided one year of Website Security Deluxe and Express Malware Removal at no cost
Changes made: Taken and will continue to take measures to enhance our security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-189688
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 3, 2020
Raw hash: 6e65756160eb06f70d7908b0e9823d20c8e0b50c4654fd4964c8207d9550c21b

Reporting entityGODADDY.COM, LLC

Victim entityGODADDY.COM, LLC

IncidentUnauthorized Access

Stated responseBlocked the unauthorized individual from our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov