The whitearmor ransomware group listed AmplifAI (GoDaddy instance) on its data leak site on 2026-11-01. Country: US Sector: Technology Domains named: godaddy.ampbi.net, godaddy.okta.com Claim as published on the leak site: GoDaddy AmplifAI Instance — Complete Data Dump ================================================ URL: https://godaddy.ampbi.net Okta SSO: https://godaddy.okta.com Okta App ID: exksdlj2ty3Pfq9En0x7 (AmplifAI) Office 365 Federation: godaddy.okta.com/app/office365/exk3q5qqbpJoB61dF0x7 ============================================================ USER DATABASE — 13,565 unique employees ============================================================ File: all_users.json Fields per user: "name": "",
OffSet7 / Dark Web / whitearmor
AmplifAI (GoDaddy instance) listed by whitearmor ransomware group
- Group
- whitearmor
- Sector
- Technology
- Country
- United States
- First seen
- 1 November 2026
This is a claim published by the threat group itself and has not been independently verified. OffSet7 does not host or link to any leaked data.
Monitor your company and suppliers
Get an alert the moment a ransomware group names your company or one of your suppliers.