DreamHost confirms breach exposing FTP, SFTP and some webmail credentials
BREACHDreamHostredteam/daily · 2 sources
- Severity
- High
- Sources
- 2
What happened
DreamHost has confirmed unauthorised access to its browser-based File Manager, exposing FTP/SFTP usernames and passwords and credentials for a limited number of webmail users. The intrusion was discovered on 23 October 2026, and the attacker may have viewed some mailbox contents. No CVE or affected software versions are given in the available text, and the notice to affected customers was cut off. Defenders should rotate FTP, SFTP and webmail credentials for DreamHost-hosted accounts and review mailbox access logs.
For security analysts · Written by AI from 2 sources · Wrong?
What to do
- Change FTP, SFTP and webmail passwords for any DreamHost account you hold.
- Check DreamHost's notice to see whether your account was affected.
Written by AI from the sources, checked against them
Full story timeline · 2 updates
Who reported · 2 outlets
Cyber Security NewsGBHackers
Who and what is in it
Companies