GoDaddy disclosed that a compromised administrative password string gave threat actors persistent access to a legacy provisioning code repository. The breach exposed the email contacts, original database passwords, and active SSL keys of over a million global managed WordPress clients.