Hundreds of Network Solutions Sites Hacked
Web site domain registrar and hosting provider Network Solutions acknowledged Tuesday that hackers had broken into its servers and defaced hundreds of customer Web sites. — The hackers appear to have replaced each site's home page …
Context & Ripple Effects
This is the second publicly confirmed breach at Network Solutions in roughly six months. In July 2009 the company issued a Data Security Alert disclosing that 573,928 records were possibly compromised after malicious code was planted on servers supporting its E-Commerce merchants, touching 4,343 customer sites.
The company's security record compounds an existing trust problem: in January 2008 it was widely accused of front-running domain searches by registering names customers looked up, forcing a public response. A registrar that holds both DNS and hosting for customers is now defending its core competence as well as its conduct.
First-order effects
- Hundreds of Network Solutions hosting customers wake up to defaced home pages and must restore their sites while the company investigates how attackers reached its servers.
- Network Solutions faces immediate notification and remediation obligations on top of the July 2009 alert, deepening the disclosure burden on a company now twice-breach-disclosed.
Second-order effects
- Customers who bundle registration and hosting with Network Solutions have reason to split providers or move to rivals such as GoDaddy, making churn — not just cleanup cost — the business exposure.
- The defacement vector through shared infrastructure pressures all mass-market hosts to harden multi-tenant servers, since one compromised box takes down every site on it at once.
Third-order effects
- A handful of large registrars acting as de facto single points of failure for millions of sites makes provider-level compromise a systemic risk rather than a per-customer one, inviting closer scrutiny of how registrars secure and disclose breaches.
- Repeated incidents at incumbent registrars erode the assumption that brand-name providers are the safe default, pushing buyers toward evaluating security posture separately from price when choosing where domains and hosting live.
The trend: Concentration of domain registration and web hosting in a few large providers is turning those providers into high-value targets whose failures cascade across hundreds of unrelated sites.