DreamHost confirms data breach exposed FTP logins and webmail sessions
DreamHost said attackers exploited a File Manager flaw for two months and may have exposed webmail sessions for a limited number of users.
6 Articles
6 Articles
BleepingComputer
IT Security News - cybersecurity, infosecurity newsDreamHost confirms data breach exposed FTP logins and webmail sessions
DreamHost is warning of a data breach after attackers gained access to its File Manager platform for two months and stole customers' FTP/SFTP usernames and passwords. [...]
DreamHost confirmed a security breach in the File Manager that exposed FTP/SFTP credentials and accesses to webmail accounts for about two months. Although the main panel and billing data do not show evidence of compromise, customers should redefine passwords, review email rules and audit hosted files to identify possible backdoors and malicious codes.
DreamHost confirmed that intruders accessed its file manager between August 2026 and October 23, and that emails and customer credentials were displayed. The company attributed the incident to an unspecified vulnerability and said that the proportion of affected customers was well below 10%, without revealing an exact figure.
Web hosting company DreamHost has confirmed unauthorized access to its File Manager server. The DreamHost data breach resulted in the theft of FTP/SFTP passwords; some webmail session information may also have been accessed.
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
