DreamHost Discloses Theft of Webmail and FTP Passwords in Targeted Attack on File Manager Tool
DreamHost has confirmed that a targeted attack on its File Manager service resulted in the theft of FTP, SFTP, and webmail credentials belonging to a subset of customers. The breach occurred between August and 23 October 2026 after attackers exploited a vulnerability in the browser-based File Manager, which relies on third-party software. The company reset affected passwords and terminated active webmail sessions on the same day the incident was discovered. In a small number of cases, the stolen credentials were used to access mailbox contents, prompting individual notifications to those customers. Less than 10 percent of all mail and FTP/SFTP accounts hosted by DreamHost were impacted. The provider has stated it will strengthen security measures to prevent similar incidents and filed a data breach notification with the California Attorney General.
Security.NLNov 5, 2026Translated from NL