GoDaddy.com

Disclosed Nov 22, 20214 years ago1,200,000 affectedConfirmed

Official notice

What is known

People affected	1,200,000 (as reported by the organization)
Disclosed	Nov 22, 2021
Discovered	Nov 17, 2021
Happened	Sep 6, 2021
Attack	Hacking
Data exposed	Names, Credentials and tokens
Sector	Tech · US
Status	Confirmed

Sources

Source	Kind
California Attorney General breach notice: GoDaddy.comoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: GoDaddy.comatg.wa.gov · Official notice	Official notice
Notice letter filed with the Delaware DOJ: GoDaddy.comattorneygeneral.delaware.gov · Official notice	Official notice
Oregon DOJ breach notice: GoDaddy.comjustice.oregon.gov · Official notice	Official notice

Notices filed

Where	Filed	People
Delaware DOJresidents of DE	Nov 22, 2021	1,107
California AGresidents of CA	Nov 23, 2021
Washington AGresidents of WA	Nov 23, 2021	9,581
Oregon DOJresidents of OR	Nov 23, 2021	1,200,000

Other breaches at GoDaddy.com

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed May 3, 2020May 3, 20206 years ago	May 3, 20206 years ago	Not stated	Tech	Confirmed	Unknown
Disclosed Feb 14, 2013Feb 14, 201313 years ago	Feb 14, 201313 years ago	Not stated	Tech	Confirmed	Unknown

History of this record

2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 1200000 · backfill source
2026-09-25 · disclosed: 2021-11-23 to 2021-11-22 · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · discovered: empty to 2021-11-17 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about GoDaddy.com

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.