The most recent files in that database were dated February 2021, which suggests that Epik's security vulnerability had been exploited months before the leak. But Epik wasn't the only web host to be attacked this year. In November, GoDaddy, which hosts more than 5M websites, stated that attackers gained access in September and were lurking inside all that time. According to GoDaddy's Chief Information Security Officer, the breach was possible due to a compromised password. The data to which attackers got access included usernames, passwords and SSL private keys.