CERT24DreamHost confirms data breach exposed FTP logins and webmail sessionsLoading data…
CERT24Threat Observatory
Period

DreamHost confirms data breach exposed FTP logins and webmail sessions

DreamHost reported a data breach in which an unauthorized third party accessed the server running its web-based File Manager from August 2026 through October 23, 2026. The FTP/SFTP usernames and passwords of customers who logged into the File Manager may have been accessed, along with webmail session information, including credentials, for a limited number of users.

← Back to intelligence

DreamHost confirms data breach exposed FTP logins and webmail sessions

DreamHost reported a data breach in which an unauthorized third party accessed the server running its web-based File Manager from August 2026 through October 23, 2026. The FTP/SFTP usernames and passwords of customers who logged into the File Manager may have been accessed, along with webmail session information, including credentials, for a limited number of users.