1.2 million WordPress sites hosted at GoDaddy have been breached. The scope of the compromise has been expanded to include even reseller subsidiaries.