
DreamHost Confirms Data Breach of FTP/SFTP and Webmail Credentials
DreamHost File Manager breach exposed FTP/SFTP credentials and some webmail logins; attackers may have viewed mailboxes, affecting under 10% of accounts.
8 stories, newest first · one card per story

DreamHost File Manager breach exposed FTP/SFTP credentials and some webmail logins; attackers may have viewed mailboxes, affecting under 10% of accounts.

Hackers stole emails, credentials and session tokens from DreamHost customers via file manager vulnerability; attack started in August.

DreamHost confirmed attackers accessed File Manager from August to October 2026, stealing FTP/SFTP credentials and webmail sessions.

File Manager was taken offline and later restored; DreamHost has not stated a cause or how many users were affected.

File Manager is back, but DreamHost still has not named a cause or how many accounts needed resets.

The hoster expired affected email and FTP/SFTP passwords but has not confirmed unauthorized access or data theft.

DreamHost has not named a cause or confirmed theft; File Manager was back by October 26 while resets stayed required.

File Manager access is still down, and users cannot log in until account owners set new credentials.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views