DreamHost resets some email and FTP passwords after systems issue
Original title: Unexplained DreamHost Incident Prompts Email, FTP Password Resets
File Manager was taken offline and later restored; DreamHost has not stated a cause or how many users were affected.
DreamHost said it suspended File Manager and DreamHost webmail after an unspecified systems issue and, as a precaution, reset passwords for some email and FTP/SFTP users. Account owners were told only they can set new passwords and that DreamHost would not request resets by email. On Monday the company said a File Manager fix was deployed and files.dreamhost.com access restored. SecurityWeek asked for the user count and root cause and had not received an answer.
Unconfirmed: DreamHost has not confirmed a breach, password exposure, or the root cause.
- The warning to users was issued on Friday and covered files.dreamhost.com and webmail.
- DreamHost told owners to have users change the old password anywhere else it was reused.
- Users on Reddit questioned transparency and whether passwords were properly hashed.
- The company said Monday it was still monitoring File Manager.
Impact: Email and FTP/SFTP passwords reset; exposure not confirmed
| Product | Affected |
|---|---|
| DreamHost File Manager | — |
| DreamHost webmail | — |
- 1.Account owners should set new passwords for the affected email and FTP/SFTP users.
- 2.Change the old password anywhere else it was reused.
- 3.Do not treat email password-reset requests as coming from DreamHost.
From the original article
1 min read at securityweek.com
The company says it reacted to an issue affecting some of its systems, including DreamHost webmail. The post Unexplained DreamHost Incident Prompts Email, FTP Password Resets appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.