The Federal Trade Commission (FTC) has mandated that web hosting giant GoDaddy implement stronger security protections following years of inadequate safeguards.
The decision comes after multiple data breaches from 2019 to 2022 exposed customer websites and sensitive data, including a large-scale attack on its shared hosting environment.
According to the FTC, GoDaddy failed to implement basic security measures like multi-factor authentication (MFA), secure software updates, network segmentation, and threat monitoring. These lapses made its hosting environment vulnerable to cyberattacks, contradicting its claims of providing reliable security to millions of customers.
“Small businesses depend on web hosting providers like GoDaddy to secure their websites,” said Samuel Levine, Director of the FTC’s Bureau of Consumer Protection. “This order ensures GoDaddy improves its security practices to protect consumers worldwide.”
