DreamHost File Manager breach steals FTP credentials and webmail session data
DreamHost confirmed a breach of its web-based File Manager that exposed FTP/SFTP credentials and webmail session data. Attackers maintained access for two months between August and October 23, 2026. Users must reset their email and FTP/SFTP passwords immediately.
2 min