The whitearmor ransomware group listed AmplifAI (GoDaddy instance) on its data leak site on 2026-11-01. Country: US Sector: Technology Domains named: godaddy.ampbi.net, godaddy.okta.com Claim as published on the leak site: GoDaddy AmplifAI Instance — Complete Data Dump ================================================ URL: https://godaddy.ampbi.net Okta SSO: https://godaddy.okta.com Okta App ID: exksdlj2ty3Pfq9En0x7 (AmplifAI) Office 365 Federation: godaddy.okta.com/app/office365/exk3q5qqbpJoB61dF0x7 ============================================================ USER DATABASE — 13,565 unique employees ============================================================ File: all_users.json Fields per user: "name": "",