FTC sues GoDaddy for years of poor hosting security practices

The FTC has ordered GoDaddy to strengthen its information security after repeated hosting-environment failures from 2019–2022 led to multi-year breaches in which attackers stole source code, installed malware, and accessed customer credentials and SSL keys; the settlement mandates mandatory MFA for customers and staff, improved security controls (logging, patching, segmentation, file integrity monitoring), and independent biennial assessments.