GoDaddy security incident history
Updated . Data gathered daily from official public sources.
As of Oct 26, 2026, Vendor History found 4 state breach notices for GoDaddy, dated May 3, 2020 to May 17, 2023. The most recent breach notice or SEC filing was on May 17, 2023. Sources checked: the California and Washington Attorney General breach lists and SEC EDGAR (Form 8-K, Item 1.05).
Breach notices and SEC cyber filings
-
GoDaddy.com LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 10/16/2019.
Source: California Attorney General
-
GoDaddy.com, LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 09/06/2021, 09/07/2021, 09/08/2021, 09/09/2021, 09/10/2021, 09/11/2021, 11/07/2021.
Source: California Attorney General
-
GoDaddy.com, LLC filed a data breach notice with the Washington Attorney General. Cause listed: Cyberattack: Malware. Washington residents affected: 9,581.
Source: Washington Attorney General (record) · all Washington notices
-
GoDaddy.com LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 10/19/2019.
Source: California Attorney General
Got a breach letter from GoDaddy? What to do when a vendor has a data breach.
We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works
To cite: Vendor History, "GoDaddy security incident history," vendorhistory.com/vendor/godaddy, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.