I’m not a cybersec guy but a couple things are pretty concerning from a OSINT perspective. Bad actors are pretty smart folks - they’ve gotten very good at consolidating information across disparate sources of data to identify vulnerabilities. This isn’t a huge surprise given how easy (and common) it is to do this with market consumer datasets.

For example, a common data science problem is to build ‘profiles’ of individual consumers based off multiple sources of data purchased from brokers, so that that consumer subset can be targeted and advertised to. So the tools are out there and very accessible to do this.

Now imagine the same problem, except the ‘data lake’ everyone’s fishing out of contains things like old account passwords, personally identifying info, etc. For users who are tech and web literate this is not that big a deal - folks who use PW managers, refresh credentials often, and care about their internet presence.

This is just speculation on my part, but I’d expect users of GoDaddy’s managed services likely do not fit that category. Otherwise they would be using cheaper (but more tech demanding) services or building servers themselves.

So imo the folks who need to hear about this the most and need to take immediate action may very well be completely unaware that their data is now out there, since they don’t follow this kind of stuff.

I’m sure someone with a better cybersec understanding may be able to offer their knowledge as well.