The Core

Go Daddy!

No rest for the wicked. Hackers exploit SSH vulnerability and compromise 28,000 GoDaddy accounts. Couldn't have happened to a nicer registrar or host.

https://www.wordfence.com/blog/2020/05/28000-godaddy-hosting-accounts-compromised

SSH, while extremely secure if configured correctly, can allow logins with either a username/password combination, or a username and a public/private key pair. In the case of this breach, it appears likely that an attacker placed their public key on the affected accounts so that they could maintain access even if the account password was changed.

Yes. I've always considered GoDaddy one of the bad actors on the web who survived and expanded through publicity stunts and Carl's Jr style ads while offering crap services and engaging in shady practices. I would have to check, but I think that like Network Solutions, they were one of the registrars that practiced front running for, ahem, the good of their customers.