The Federal Trade Commission (FTC) has ordered web hosting company GoDaddy to implement a “robust” information security program following at least three data breaches that the agency said were aided by lax cybersecurity measures.

The FTC’s order, issued Wednesday, found that GoDaddy violated the Federal Trade Commission Act when it failed to implement “reasonable and appropriate security measures to protect and monitor its website-hosting environments for security threats” and misled customers about the extent of its data security protections, the FTC said in a press release. The order did not include a fine.

Aaron Nicodemus is the Editor-in-Chief of Compliance Week. He previously worked as a reporter for Bloomberg Law and as business editor at the Telegram & Gazette in Worcester, Mass. Email: aaron.nicodemus@complianceweek.com LinkedIn:...