TEMPE, Ariz.–GoDaddy, which serves as a web host and provides other services to credit unions, is reporting that on Sept. 18 it experienced an AI-driven cyberattack that resulted in exposure of information about users’ Websites + Marketing (W+M) product.
“Specifically, the third party obtained profile and setting information, including any contact information you supplied for publication on your website, from an application programming interface (API),” the company said in a statement to customers. “Based on our investigation, the third-party activity was limited to reading the above-mentioned data and the third party did not obtain your password, access your account, make changes to your website or take any other action affecting your account or products.”
First Known Attack
According to GoDaddy, the information was exposed as part of the first known AI-driven cyberattack against the company, which said it detected the incident on Sept. 19 and responded immediately.
“We defended against the attack and prevented interruption of our services or impact on customer environments,” GoDaddy stated. “We have also taken necessary actions to further defend and protect against such AI-driven attacks in the future. We believe the incident is now contained. We reported the incident to law enforcement, engaged cybersecurity experts, and worked with industry partners to stop the activity. We voluntarily notified the Federal Trade Commission and data protection authorities in the UK and EU.”
