Excerpt from TechCrunch, Published on November 4, 2026
The DreamHost data breach has raised cybersecurity concerns after hackers accessed the web hosting provider’s systems and stole customer files, email information, and account credentials. The months-long incident involved unauthorized access to the company’s web-based File Manager, potentially exposing sensitive customer information and creating risks for hosted websites and email accounts.
The DreamHost data breach began in August 2026 when an unauthorised actor exploited a vulnerability in the company’s web-based File Manager. The attackers gained access to customer information, including FTP/SFTP credentials, certain webmail data, and session tokens. DreamHost discovered the unauthorized activity on October 23, 2026, and publicly disclosed the incident on October 29. According to the company, attackers accessed information associated with customers who had used the affected File Manager during the breach period. In a limited number of cases, email mailbox contents may also have been accessed.
A notification filed with the California Attorney General indicated that exposed session tokens could potentially allow attackers to access accounts without entering passwords again. The incident affected well under 10% of DreamHost’s hosted email and FTP/SFTP accounts, although the exact number of affected individuals remains undisclosed. Following the discovery, DreamHost took the affected File Manager servers offline, addressed the vulnerability, reset potentially compromised passwords, and terminated active sessions. The company also engaged external cybersecurity specialists to investigate the incident.
The investigation remains ongoing, and DreamHost has not publicly identified the attackers or disclosed the specific vulnerability exploited.
For additional information, read the full report from TechCrunch.
