CERT24DreamHost confirms data breach exposed FTP logins and webmail sessionsLoading data…
CERT24Threat Observatory
Period

DreamHost confirms data breach exposed FTP logins and webmail sessions

DreamHost reported a data breach after an unauthorized third party accessed the server hosting its web-based File Manager for two months. The attacker accessed FTP/SFTP usernames and passwords of individuals who logged into the File Manager from approximately August 2026 through October 23, 2026. Webmail session information, including credentials, may also have been accessed for a limited number of users.

← Back to intelligence

DreamHost confirms data breach exposed FTP logins and webmail sessions

DreamHost reported a data breach after an unauthorized third party accessed the server hosting its web-based File Manager for two months. The attacker accessed FTP/SFTP usernames and passwords of individuals who logged into the File Manager from approximately August 2026 through October 23, 2026. Webmail session information, including credentials, may also have been accessed for a limited number of users.