SFTP

Web hosting company DreamHost has confirmed a data breach in which hackers stole FTP and SFTP credentials. Using these stolen credentials, the attackers gained access to customers' email accounts, raising concerns about potential exposure of sensitive communications. DreamHost has confirmed the incident publicly, though details on the number of affected customers and the scope of the intrusion remain limited.

DreamHost has disclosed a security breach in which a flaw in its files.dreamhost.com service was exploited, exposing customers' FTP and SFTP usernames and passwords, along with webmail session data for some users. The company says no billing information or control panel credentials were found. Affected customers are being urged to rotate FTP passwords, audit their site files, and check email forwarding rules.

Web hosting company DreamHost has disclosed a security breach in which attackers had access to its File Manager platform for roughly two months. The intrusion exposed customers' FTP and SFTP usernames and passwords as well as webmail session data. Security commentators are urging affected users to rotate their credentials and review access logs, noting that hosting providers are prime targets for attackers.

DreamHost says attackers exploited its File Manager tool and accessed FTP/SFTP passwords of users who signed in between August and October 2023. Some webmail credentials were also exposed, and a few mailboxes may have been viewed. The hosting company has reset affected logins and its investigation is ongoing, while security experts urge administrators to rotate their passwords and check for unauthorized access.