DreamHost data breach exposed FTP logins and webmail sessions
Original title: DreamHost confirms data breach exposed FTP logins and webmail sessions
DreamHost confirmed attackers accessed File Manager from August to October 2026, stealing FTP/SFTP credentials and webmail sessions.
DreamHost has confirmed a data breach in which an unauthorized third party exploited a vulnerability in its web-based File Manager at files.dreamhost.com. This affected FTP/SFTP usernames and passwords of users who logged in between approximately August 2026 and October 23, 2026. The intruder may also have accessed webmail systems, exposing session information including credentials for a limited number of users. The company has blocked the attackers' access, addressed the vulnerability and stopped active sessions for potentially affected users.
- Breach from August 2026 to October 23, 2026
- Stolen FTP/SFTP usernames and passwords
- Possible access to webmail session information
- Company offered credit monitoring to impacted users
Impact: FTP/SFTP credentials and webmail sessions exposure
- 1.Reset FTP/SFTP and email passwords
- 2.Check website files for unauthorized changes
- 3.Review webmail forwarding rules
- Vendors
- DreamHost
- Products
- File Manager
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | files.dreamhost.com | accessed the server that runs our web-based File Manager at files.dreamhost.com," reads the notification . "The unauthorized third party ex |
From the original article
2 min read at bleepingcomputer.com
DreamHost is warning of a data breach after attackers gained access to its File Manager platform for two months and stole customers' FTP/SFTP usernames and passwords. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.