DreamHost confirms customer data theft in months-long attack
Original title: Hackers stole DreamHost customer files and inboxes during months-long attack
Hackers stole emails, credentials and session tokens from DreamHost customers via file manager vulnerability; attack started in August.
Web host DreamHost confirmed hackers stole customer emails, credentials and session tokens during a months-long cyberattack. The attack began in August and exploited an unspecified vulnerability in the file manager. DreamHost experienced an outage and reset some customer passwords. The company stated the number of affected customers is well under 10% of its 400,000 paying customers.
- Attack began in August and went undetected until last week
- Vulnerability in DreamHost file manager allowed session token theft
- Company unrelated to recent PHP vulnerabilities
- Spokesperson declined to name vulnerability or detection reasons
- Vendors
- DreamHost
From the original article
1 min read at techcrunch.com
The web host said hackers exploited a vulnerability to access customer emails and files during a "deliberate attack."
By Zack Whittaker · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.