DreamHost confirms breach of File Manager exposing FTP credentials
Original title: DreamHost Confirms Data Breach – Hackers Stole Customer Credentials and Accessed Emails
Attackers exploited a flaw in DreamHost File Manager to steal FTP/SFTP usernames/passwords and some webmail credentials from fewer than 10% of accounts; passwords have been reset.
DreamHost discovered unauthorized access on October 23, 2026 to its web-based File Manager. Attackers obtained FTP/SFTP credentials and accessed private mailbox contents in a small number of cases. The company estimates well under 10% of hosted email and FTP accounts were affected. It reset passwords, ended sessions and is rebuilding the service with added safeguards.
Unconfirmed: Ongoing investigation into full impact and whether control panel logins were accessed
- exposure window back to August 2026
- less than 10% of accounts affected
- FTP/SFTP and some webmail credentials stolen
- File Manager returned online October 26
- no control panel or billing data accessed
Impact: FTP/SFTP usernames/passwords and some webmail credentials
- 1.reset passwords via control panel
- 2.inspect website files for changes
- 3.check mailbox filters
- Vendors
- DreamHost
- Products
- File Manager
From the original article
2 min read at cybersecuritynews.com
DreamHost has confirmed a breach that exposed customer login details after hackers exploited its web-based File Manager. The hosting provider said attackers obtained FTP/SFTP usernames and passwords, along with some webmail credentials. In a small number of cases, private mailbox contents may also have been viewed.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.