DreamHost Forces Email and FTP/SFTP Password Resets After Incident
Summary
DreamHost reset email and FTP/SFTP passwords after an incident disrupted File Manager access. The company advised users to check for unfamiliar forwarding rules, but has not disclosed whether accounts, files or messages were exposed.
Key points
- DreamHost reported File Manager connectivity problems on October 23; the incident later affected additional services.
- The provider blocked affected users from logging in until account owners set new passwords and sent recovery instructions.
- File Manager remained unavailable at publication, and DreamHost had not disclosed the number of affected accounts.
- DreamHost advised users to check email forwarding rules for unfamiliar destinations, but did not confirm that accounts or messages were breached.
- The company also recommended changing reused passwords on other services; the incident's cause and scope remained unclear.
Article Details
- Victim Organization
- DreamHost
- Incident Type
- Ongoing incident involving disrupted File Manager access and forced password resets for email and FTP/SFTP users; possible account compromise was not confirmed.
- Disclosure Date
- 2026-10-23
- Data Types Exposed
- Email account data (possible exposure; not confirmed)
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- File Manager access remained unavailable as of publication. Affected users were unable to log in until their account owner set new credentials; email and FTP/SFTP users were required to reset passwords.
- Ransom Or Extortion
- Not disclosed
- Claim Status
- unknown