DreamHost has forced password resets for email and FTP/SFTP users after an incident disrupted connectivity to its file manager interface. The web hosting provider says all affected account holders have received recovery instructions, but users cannot log in until the account owner creates new credentials.
DreamHost is an American web hosting provider and domain registrar offering WordPress hosting, business email, virtual private servers, dedicated servers and cloud services.
According to the company, DreamHost has more than 400,000 customers in over 100 countries and supports at least 1.5 million websites and applications, including 750,000 WordPress installations.
DreamHost access remains restricted
DreamHost first reported connectivity issues affecting its file manager interface on October 23, but the impact soon spread to other services.
The company responded by blocking access while users reset their passwords, describing the measure as a precaution. DreamHost sent recovery instructions to affected account holders over the weekend.
At the time of publication, the incident remained ongoing, and file manager access was still unavailable.
Users urged to check email forwarding rules
In a notification to affected account holders, DreamHost also recommended checking the forwarding rules for each email address and deleting any forwarding destinations users do not recognize.
The recommendation suggests that some email accounts may have been compromised and exposed to external attackers, although DreamHost has not provided additional details.
Longtime customers have also criticized the company for providing limited information, leading some to speculate about what happened.
“It’s disturbing to receive emails like this with no explanation whatsoever as to what’s going on, and it’s extremely frustrating for our user community to have to guess,” one customer said.
Users should also change any reused DreamHost password on other platforms or services.
Account holders asked to notify mailbox and FTP users
DreamHost said it cannot directly contact individual mailbox or FTP users. The company urged account holders to notify affected users by phone, text message or other means, because users whose passwords have been reset may no longer be able to access their email accounts.
BleepingComputer contacted DreamHost multiple times with questions about the incident, the number of affected accounts and whether any files or messages were exposed. The company had not responded at the time of publication.
The overall prevention score can hide what happens after the initial access. If an attacker uses valid credentials, your defenses drop sharply.
The Blue Report 2026 measures defense techniques by technology across 338 million simulations run in customer production environments.
Source: www.bleepingcomputer.com