DreamHost forces password resets on email and FTP accounts during ongoing incident
Affected users stay locked out until their account owner sets new credentials, and File Manager remains unavailable.
Web hosting provider DreamHost has forced password resets on email and FTP/SFTP accounts after an incident that began disrupting its File Manager interface on October 23 and then spread to other services. Affected users cannot log in until their account owner sets new credentials, and the company sent recovery instructions in batches over the weekend. DreamHost advises owners to check each mailbox for forwarding rules and remove any destination they do not recognise, which hints that some mail accounts may have been accessed, though the company has not confirmed a breach. File Manager remained unavailable at publication, and the provider had not answered press questions about the number of accounts or whether files or messages were exposed. For developers and operators relying on DreamHost, the practical steps are resetting credentials, auditing forwarding rules, and reusing no password elsewhere.
Why it matters
For hosting customers, the incident means losing access to email and file transfer until credentials are reset, and forwarding rules should be checked in case mail was redirected. DreamHost has not said how many accounts are affected or whether files or messages were exposed, so the scope of the incident is still unclear.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.