DreamHost confirms breach exposed customer FTP credentials and webmail sessions

# DreamHost confirms breach exposed customer FTP credentials and webmail sessions

https://gcdradar.vercel.app/incidents/dreamhost-confirms-breach-exposed-customer-ftp-credentials-a · AIR-2026-1778 · live

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed data breach affecting customer credentials.
- Fix status: No fix needed
- First reported: 2026-11-04
- AI role: No AI role
- Products: DreamHost File Manager

## Summary

DreamHost issued a warning after attackers gained unauthorized access to its File Manager platform for two months. The breach exposed customer FTP and SFTP usernames and passwords.

## What to do

Reset FTP and SFTP passwords and review webmail access logs.

## Affected and fixed versions

- Affected: DreamHost File Manager

## Latest updates

- 2026-11-04: DreamHost confirms data breach exposed FTP logins and webmail sessions (https://bleepingcomputer.com/news/security/dreamhost-confirms-data-breach-exposed-ftp-logins-and-webmail-sessions)

## Sources

- 2026-11-04 BleepingComputer: DreamHost confirms data breach exposed FTP logins and webmail sessions https://bleepingcomputer.com/news/security/dreamhost-confirms-data-breach-exposed-ftp-logins-and-webmail-sessions

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.