DreamHost says a File Manager breach exposed FTP passwords and webmail sessions
DreamHost said an attacker accessed its web-based File Manager from August 2026 through October 23, 2026, obtaining FTP/SFTP usernames and passwords from users who logged in during that period. Recipients of the company’s breach notices should inspect website files, review webmail rules and change reused passwords.