Back Securityweek

Unexplained DreamHost Incident Prompts Email, FTP Password Resets

Securityweek •Ionut Arghire • October 27, 2026

Over the weekend, web hosting provider DreamHost suspended its File Manager service and reset some user passwords. The company says it took protective actions in response to “an issue” with its systems, which affected File Manager at files.dreamhost.com and DreamHost webmail. “As a precaution, we are resetting passwords for some email and FTP/SFTP users,” the company warned on Friday. It also notified DreamHost account owners via private communication ( shared on ), noting that users would need to set new passwords when logging in, and underlining that DreamHost would not request password resets via email. “We are contacting you because you are the DreamHost account owner, and only you will be able to set new passwords for these users. DreamHost is unable to individual mailbox or FTP users directly, so they may not know this until you tell them,” the company said. “If they used the old password anywhere else, they should change it there too,” DreamHost told account owners. Users complained DreamHost’s lack of transparency, and some speculated that the passwords may have been compromised and questioned whether they were properly hashed. In the meantime, DreamHost says it has created and deployed a fix to the File Manager and restored access to “We are monitoring the situation to ensure that the File Manager is back in a fully operational state,” the company said on Monday. SecurityWeek has emailed DreamHost for information on the number of affected users and the root cause of the incident and will update this article if the company responds. Related: Genesys Hack Exposes Customer Data From Internal Systems Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

The company says it took protective actions in response to “an issue” with its systems, which affected File Manager at files.dreamhost.com and DreamHost webmail. “As a precaution, we are resetting passwords for some email and FTP/SFTP users,” the company warned on Friday. It also notified DreamHost account owners via private communication ( shared on ), noting that users would need to set new passwords when logging in, and underlining that DreamHost would not request password resets via email. “We are contacting you because you are the DreamHost account owner, and only you will be able to set new passwords for these users. DreamHost is unable to individual mailbox or FTP users directly, so they may not know this until you tell them,” the company said. “If they used the old password anywhere else, they should change it there too,” DreamHost told account owners. Users complained DreamHost’s lack of transparency, and some speculated that the passwords may have been compromised and questioned whether they were properly hashed. In the meantime, DreamHost says it has created and deployed a fix to the File Manager and restored access to “We are monitoring the situation to ensure that the File Manager is back in a fully operational state,” the company said on Monday. SecurityWeek has emailed DreamHost for information on the number of affected users and the root cause of the incident and will update this article if the company responds. Related: Genesys Hack Exposes Customer Data From Internal Systems Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

“As a precaution, we are resetting passwords for some email and FTP/SFTP users,” the company warned on Friday. It also notified DreamHost account owners via private communication ( shared on ), noting that users would need to set new passwords when logging in, and underlining that DreamHost would not request password resets via email. “We are contacting you because you are the DreamHost account owner, and only you will be able to set new passwords for these users. DreamHost is unable to individual mailbox or FTP users directly, so they may not know this until you tell them,” the company said. “If they used the old password anywhere else, they should change it there too,” DreamHost told account owners. Users complained DreamHost’s lack of transparency, and some speculated that the passwords may have been compromised and questioned whether they were properly hashed. In the meantime, DreamHost says it has created and deployed a fix to the File Manager and restored access to “We are monitoring the situation to ensure that the File Manager is back in a fully operational state,” the company said on Monday. SecurityWeek has emailed DreamHost for information on the number of affected users and the root cause of the incident and will update this article if the company responds. Related: Genesys Hack Exposes Customer Data From Internal Systems Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

It also notified DreamHost account owners via private communication ( shared on ), noting that users would need to set new passwords when logging in, and underlining that DreamHost would not request password resets via email. “We are contacting you because you are the DreamHost account owner, and only you will be able to set new passwords for these users. DreamHost is unable to individual mailbox or FTP users directly, so they may not know this until you tell them,” the company said. “If they used the old password anywhere else, they should change it there too,” DreamHost told account owners. Users complained DreamHost’s lack of transparency, and some speculated that the passwords may have been compromised and questioned whether they were properly hashed. In the meantime, DreamHost says it has created and deployed a fix to the File Manager and restored access to “We are monitoring the situation to ensure that the File Manager is back in a fully operational state,” the company said on Monday. SecurityWeek has emailed DreamHost for information on the number of affected users and the root cause of the incident and will update this article if the company responds. Related: Genesys Hack Exposes Customer Data From Internal Systems Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

“We are contacting you because you are the DreamHost account owner, and only you will be able to set new passwords for these users. DreamHost is unable to individual mailbox or FTP users directly, so they may not know this until you tell them,” the company said. “If they used the old password anywhere else, they should change it there too,” DreamHost told account owners. Users complained DreamHost’s lack of transparency, and some speculated that the passwords may have been compromised and questioned whether they were properly hashed. In the meantime, DreamHost says it has created and deployed a fix to the File Manager and restored access to “We are monitoring the situation to ensure that the File Manager is back in a fully operational state,” the company said on Monday. SecurityWeek has emailed DreamHost for information on the number of affected users and the root cause of the incident and will update this article if the company responds. Related: Genesys Hack Exposes Customer Data From Internal Systems Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

“If they used the old password anywhere else, they should change it there too,” DreamHost told account owners. Users complained DreamHost’s lack of transparency, and some speculated that the passwords may have been compromised and questioned whether they were properly hashed. In the meantime, DreamHost says it has created and deployed a fix to the File Manager and restored access to “We are monitoring the situation to ensure that the File Manager is back in a fully operational state,” the company said on Monday. SecurityWeek has emailed DreamHost for information on the number of affected users and the root cause of the incident and will update this article if the company responds. Related: Genesys Hack Exposes Customer Data From Internal Systems Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

Users complained DreamHost’s lack of transparency, and some speculated that the passwords may have been compromised and questioned whether they were properly hashed. In the meantime, DreamHost says it has created and deployed a fix to the File Manager and restored access to “We are monitoring the situation to ensure that the File Manager is back in a fully operational state,” the company said on Monday. SecurityWeek has emailed DreamHost for information on the number of affected users and the root cause of the incident and will update this article if the company responds. Related: Genesys Hack Exposes Customer Data From Internal Systems Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

In the meantime, DreamHost says it has created and deployed a fix to the File Manager and restored access to “We are monitoring the situation to ensure that the File Manager is back in a fully operational state,” the company said on Monday. SecurityWeek has emailed DreamHost for information on the number of affected users and the root cause of the incident and will update this article if the company responds. Related: Genesys Hack Exposes Customer Data From Internal Systems Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

“We are monitoring the situation to ensure that the File Manager is back in a fully operational state,” the company said on Monday. SecurityWeek has emailed DreamHost for information on the number of affected users and the root cause of the incident and will update this article if the company responds. Related: Genesys Hack Exposes Customer Data From Internal Systems Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

SecurityWeek has emailed DreamHost for information on the number of affected users and the root cause of the incident and will update this article if the company responds. Related: Genesys Hack Exposes Customer Data From Internal Systems Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

Related: Genesys Hack Exposes Customer Data From Internal Systems Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

Related: 11 Million Impacted by Capcom Data Breach Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Related: Hackers Steal 1.8 Million Records From Nikkei

Related: Hackers Steal 1.8 Million Records From Nikkei

Ionut Arghire is an international correspondent for SecurityWeek.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DreamHost Password Resets Following Service Disruption DreamHost has mandated password resets for some email and FTP/SFTP users after a service disruption that began on October 23, 2026. The incident affected the File Manager and webmail services, preventing users from accessing their accounts until account owners set new credentials. DreamHost has not disclosed the cause of the disruption or the number of affected customers, which includes over 400,000 users globally. The company initially reported connectivity issues with the File Manager, which escalated to password resets as a precaution. Customers have expressed frustration over the lack of communication regarding the incident. Administrators are advised to manage password updates through the DreamHost control panel and review email forwarding settings for any unauthorized changes. The status of the File Manager remains disrupted, and users are cautioned to update their credentials in email applications. DreamHost emphasizes that it will not request passwords via email. 5 sources 40

Extracted Entities

Domains (1)

files.dreamhost.com