DreamHost admits major cyberattack saw hackers steal customer data and access inboxes
- DreamHost discloses breach exposing FTP/SFTP credentials and some webmail account session data
- Attackers exploited a vulnerability in the company’s File Manager service to access customer accounts
- DreamHost reset affected passwords, offered credit monitoring, and urged users to strengthen account security
Popular web hosting provider DreamHost has confirmed threat actors walked away with login credentials to its customers’ hosting accounts, as well as webmail accounts.
It is now urging organizations to take steps to protect themselves, as it works to tighten up on security and make sure these things never happen again.
In a copy of a data breach notification letter sent to affected organizations, DreamHost said that roughly two weeks ago it discovered unauthorized third-party access to the server that runs its web-based File manager at files.DreamHost.com.
Access to the manager was compromised during August 2026, the company further said, adding that the threat actors walked in by exploiting a...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
