Re: How very 1990s
It sounds like it was a key-file that got altered.
GoDaddy wouldn't have the private keys, they would have the public keys to check against when logging on. At a guess, the hackers added their own public keys to the affected accounts to enable access.