Security AlertHigh
DreamHost says breach exposed FTP logins and some webmail sessions
Nov 4, 2026 · Summarized by Fundy Tech from BleepingComputer
The 30-second version
DreamHost says attackers accessed its File Manager from August to October 23, 2026, and stole FTP/SFTP usernames and passwords. Some webmail session information may also have been exposed.
Key points
- The breach ran from August 2026 to October 23, 2026.
- DreamHost says the File Manager was accessed through a software vulnerability.
- FTP/SFTP usernames and passwords were stolen.
- Some users may also have had webmail session data exposed.
Why it matters
If you use DreamHost, you may need to reset credentials and check website files. Small businesses should also review any accounts that reused the same password elsewhere.
Who’s affected: DreamHost File Manager users
What to do
- Change affected FTP/SFTP and email passwords.
- Check website files for unauthorised changes.
- Review webmail forwarding rules and filters.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.