GoDaddy Says AI-Driven Cyberattack Exposed Website Customer Information

GoDaddy has disclosed what it calls its first known AI-driven cyberattack, in which an attacker used an application programming interface to obtain information related to its Websites + Marketing product on September 18, discovered the next day. The exposed information included profile, settings, and contact information, including contact details customers provided for public display on their websites, while GoDaddy said the attacker did not obtain passwords or access customer accounts and the activity was limited to reading the exposed information. GoDaddy said it contained the incident, reported it to law enforcement, voluntarily notified the Federal Trade Commission and UK and EU data protection authorities, and urged customers to watch for phishing and enable two-step verification, making it an early documented case of an AI-driven intrusion reaching customer data at a major web services company.

• Hacker News (AI)2026-10-28 19:52