Thursday 5 November
Global

Your region, kept on this device.

DreamHost confirms breach exposing FTP, SFTP and some webmail credentials

Severity
High
Sources
2

confirmed a breach involving its browser-based File Manager, which exposed FTP/SFTP usernames and passwords and the credentials of a limited number of webmail users. Unauthorised access was discovered on 23 October 2026, and attackers may have viewed the contents of some mailboxes.

For IT people · Written by AI from 2 sources · Wrong?

What to do

  1. Change FTP, SFTP and webmail passwords for any DreamHost account you hold.
  2. Check DreamHost's notice to see whether your account was affected.

Written by AI from the sources, checked against them

Full story timeline · 2 updates

  1. Thu 5 NovemberDreamHost Confirms Data Breach – Hackers Stole Customer Credentials and Accessed EmailsCyber Security News
  2. DreamHost Confirms Data Breach After Hackers Steal FTP/SFTP Credentials and Access Customer EmailsGBHackers

Who reported · 2 outlets

Cyber Security NewsGBHackers

Who and what is in it

Companies

Report a problem