Major web hosting provider DreamHost suffered a covert security compromise that began in August 2026 and remained undetected until October 23, 2026. Attackers exploited an unpatched software flaw within the company’s browser-based File Manager tool to gain unauthorized access to underlying server environments. The intrusion exposed customer FTP and SFTP usernames, passwords, and stored directory contents, impacting a subset representing well under 10% of its roughly 400,000 paying users. ntruders also acquired session tokens, allowing them to breach specific webmail systems and potentially access message contents and personal emails for a limited group of accounts. DreamHost confirmed that its primary customer account control panels, core infrastructure, and financial billing databases stored via external processors remained secure and untouched.

Full report : DreamHost confirms data breach exposed FTP logins and webmail sessions.