DreamHost forces password resets in ongoing “incident”

Illustration of a software bug

DreamHost, a major web hosting provider serving over 400,000 customers worldwide, has mandated password resets for email and FTP/SFTP users following a security incident. The disruption initially affected the File Manager interface on October 23 before expanding to additional services. The company has blocked all user access until account owners establish new credentials, and recovery instructions have been distributed to affected account holders in batches over the weekend.

The incident remains active, with File Manager access still unavailable as of the report’s publication. DreamHost has advised users to review email forwarding rules and remove any unrecognized destinations, suggesting potential unauthorized access to email accounts. The company has also recommended that users change any reused passwords on other platforms. Notably, DreamHost has provided limited details about the incident’s scope and nature, leaving customers frustrated by the lack of transparency and unable to directly contact individual mailbox or FTP users about the security measure.

Source: Read the full story at BleepingComputer

This summary was written with AI assistance from the linked source.

Send this to yourself, or to someone who should see it

Enter your email and we will send you a link to this article.

We use your email only to send this link. It is not saved or added to any list.

Or share it