Bleepingcomputer DreamHost Password Resets Following Service Disruption
Article Content
- •DreamHost initiated mandatory password resets for affected email and FTP/SFTP users.
- •The disruption began on October 23, impacting access to the File Manager and webmail services.
- •Account owners must manually reset passwords for affected users as DreamHost cannot contact individual accounts directly.
DreamHost has mandated password resets for some email and FTP/SFTP users after a service disruption that began on October 23, 2026. The incident affected the File Manager and webmail services, preventing users from accessing their accounts until account owners set new credentials. DreamHost has not disclosed the cause of the disruption or the number of affected customers, which includes over 400,000 users globally. The company initially reported connectivity issues with the File Manager, which escalated to password resets as a precaution. Customers have expressed frustration over the lack of communication regarding the incident. Administrators are advised to manage password updates through the DreamHost control panel and review email forwarding settings for any unauthorized changes. The status of the File Manager remains disrupted, and users are cautioned to update their credentials in email applications. DreamHost emphasizes that it will not request passwords via email.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track DreamHost in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Who is affected by the password resets?
What should account owners do?
Is there any indication of a breach?
Continue Reading
PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing…