WORLDTECHDreamHost discloses breach of File Manager exposing FTP logins and webmail access
DreamHost has warned customers of a data breach after attackers gained access to its browser-based File Manager platform, according to a report by BleepingComputer. The intrusion is said to have exposed FTP and SFTP login details, and the company believes some mailboxes may have been viewed.
What the company has confirmed
DreamHost has confirmed a security breach involving its browser-based File Manager. The incident exposed usernames and passwords used for FTP and SFTP access, as well as the login credentials of a limited number of webmail users.
The company discovered the unauthorised access on October 23, 2026. Attackers are reported to have had access to the platform for two months before the intrusion was identified.
Possible access to mailboxes
DreamHost believes the attackers may have viewed the contents of some mailboxes. The company has not, according to the available facts, said how many accounts were affected beyond describing the webmail exposure as limited.
Affected customers are being notified, the reporting indicates, though the details of that outreach are not spelled out in the facts available.
Open questions
- How many customers were affected by the exposed FTP, SFTP and webmail credentials?
- Which mailboxes were viewed, and what did the attackers see?