DreamHost confirms breach of File Manager exposing FTP credentials
Attackers exploited a flaw in DreamHost File Manager to steal FTP/SFTP usernames/passwords and some webmail credentials from fewer than 10% of accounts; passwords have been reset.
55
Product
File Manager
- Mentions · 7d1
- Mentions · 30d5
- All mentions5
- First seenOct 27, 2026
- Last mentioned6d ago
Timeline
5 articles · newest firstDreamHost data breach exposed FTP logins and webmail sessions
DreamHost confirmed attackers accessed File Manager from August to October 2026, stealing FTP/SFTP credentials and webmail sessions.
60
DreamHost resets some email and FTP passwords after systems issue
File Manager was taken offline and later restored; DreamHost has not stated a cause or how many users were affected.
46
DreamHost resets some email and FTP passwords after service incident
File Manager is back, but DreamHost still has not named a cause or how many accounts needed resets.
48
DreamHost forces password resets after File Manager and webmail incident
The hoster expired affected email and FTP/SFTP passwords but has not confirmed unauthorized access or data theft.
48
Appears with
- DreamHostvendor · 5
- DreamHost webmailproduct · 1
- FTP/SFTPproduct · 1
- email hostingproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.