Reported by 2 outlets

DreamHost resets customer email and FTP credentials following a service disruption

Cybersecurity illustration · BleepingComputer

The story so far

AI summary of the reporting below · Updated · How we work

DreamHost has triggered mandatory password resets for email, FTP, and SFTP users following an operational disruption that started on October 23. The incident initially impacted connectivity to the company's File Manager interface before widening to include systems such as DreamHost webmail, leading the hosting provider to block user logins as a precautionary measure. [1][2]

Affected customers cannot access their accounts until primary account owners establish new credentials. DreamHost noted it cannot reach mailbox or FTP users directly, advising account owners to contact them through external methods like phone calls or text messages. The provider has also instructed users to inspect their email setups for unauthorized forwarding rules and to update credentials on any third-party services where DreamHost passwords were reused. [2]

The incident remains ongoing, and File Manager access has stayed offline while recovery instructions are distributed in batches. Customers have expressed frustration over the lack of explanation regarding whether personal files or email messages were compromised, and DreamHost has not shared further technical details about the cause. [1][2]

Read the original reporting

2 outlets