DreamHost forces password resets after File Manager and webmail incident
Original title: DreamHost Security Incident Forces Password Resets for Email and FTP/SFTP Accounts
The hoster expired affected email and FTP/SFTP passwords but has not confirmed unauthorized access or data theft.
DreamHost restored its browser-based File Manager on October 26 after connectivity problems that began October 23 and later affected webmail and FTP/SFTP. It expired passwords on affected accounts while engineers investigated. Mail kept arriving, and FTP/SFTP data remained on its servers. Individual users cannot sign in until the account owner sets and shares new passwords.
Unconfirmed: The root cause, number of affected accounts, and any unauthorized access or data theft are undisclosed.
- Engineers restored files.dreamhost.com at 3:35 p.m. PDT on October 26.
- Impacted account holders received instructions on October 25 at 9:32 p.m. PDT.
- A “Failed to edit” error blocked some Professional Email password changes and was fixed.
- DreamHost says it never requests passwords by email.
Impact: Some email and FTP/SFTP logins disabled; theft not confirmed
| Product | Affected |
|---|---|
| DreamHost File Manager, webmail, and FTP/SFTP | — |
- 1.Reset email passwords in the panel under Mail > Manage Email.
- 2.Reset FTP/SFTP users under Websites > SFTP Users & Files.
- 3.Update saved client passwords and remove unrecognized mailbox forwarding.
- Vendors
- DreamHost
- Products
- File Manager
From the original article
2 min read at gbhackers.com
DreamHost has implemented forced password resets for certain email and FTP/SFTP accounts following an incident that affected its File Manager and webmail services. The company restored its browser-based File Manager on October 26, 2026. However, users affected by the incident must obtain new login credentials from their account owners before they can access their accounts.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.