DreamHost says attackers exploited a vulnerability in its browser-based File Manager to access FTP/SFTP usernames and passwords and credentials for a limited number of webmail users. The company discovered the intrusion on October 23 after an unauthorized party accessed the server running files.dreamhost.com.
The exposure involved users who logged into File Manager between approximately August 2026 and October 23. DreamHost said the incident affected a fraction of its hosted email and FTP/SFTP accounts, well under approximately 10%. In a small number of cases, the attacker may also have viewed mailbox contents, and the company is contacting those customers individually.
DreamHost said it reset passwords and terminated active sessions for accounts it believed could have been affected. The breach notice filed with California’s attorney general says information accessed may have included File Manager or webmail usernames and passwords, email contents, and files stored on FTP/SFTP servers.
The company said it has found no evidence that control-panel login information or customer billing details were accessed. Websites and email remained available during the incident. BleepingComputer reported that DreamHost did not provide an exact count of affected accounts.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
