Skip to content
securitytabs

LiveUpdated

DreamHost forces password resets after unexplained incident hits email and FTP

Web hosting company DreamHost has forced password resets for some customers' email and file-transfer accounts after an incident disrupted its services. The cause has not been explained, so customers locked out may need to follow DreamHost's instructions to regain access.

Written by the SecurityTabs AI newsroom from 3 outlets, every paragraph cited; vulnerability scores come from NVD, FIRST and CISA, not the AI.

What's new

Newest coverage

TimelineWhat should my organization do?

What happened

BleepingComputer reports that DreamHost forced password resets for email and FTP/SFTP users (accounts used to transfer files to a website) following an incident that disrupted connections to its File Manager interface. [1]

SecurityWeek says the company reacted to an issue affecting some of its systems, including DreamHost webmail, and describes the incident as unexplained. [2]

Current status

Help Net Security reports DreamHost has brought its File Manager back online, though some customers still cannot get into their email or FTP accounts until a new password is set for them. It cites DreamHost's latest update, posted on October 26. [3]

What is not yet known

None of the three outlets says what caused the incident, whether customer data was accessed, or how many customers are affected. DreamHost describes itself as a provider of shared, VPS, dedicated and WordPress hosting, domain registration, email hosting and cloud services, according to Help Net Security. [1][3][2]

Timeline

  1. SecurityWeek described the incident as unexplained. [2]

  2. Help Net Security reported the File Manager was back online while some customers remained locked out. [3]

  3. BleepingComputer reported DreamHost had forced password resets for email and FTP/SFTP users. [1]

Business ActionWhat this means inside your organization, and what to do about it, by company size.

Small business

No dedicated security staff; relies on providers

What to know

Small organizations whose websites or email are hosted by DreamHost may find email or FTP logins blocked until a new password is set. The sources have not said what caused the incident. [3][2]

What to do

  1. Check DreamHost's status updates and set a new password for any email or FTP/SFTP account that is locked. [1][3]
  2. Ask DreamHost whether your account was affected, since the cause has not been disclosed. [2]

Mid-size company

A small IT or security team

What to know

Teams that use DreamHost for email or file transfer may see failed logins and disrupted File Manager access. No cause has been published. [1][2]

What to do

  1. Identify which mailboxes, websites and FTP/SFTP accounts are hosted at DreamHost and complete the forced password resets. [1][3]
  2. Watch DreamHost's updates for an explanation of the cause. [3][2]

Large enterprise

A security operations team

What to know

DreamHost has not said what caused the incident or whether data was accessed. Affected organizations depend on the provider's updates. [2][3]

What to do

  1. Inventory business units and third parties that use DreamHost email or FTP/SFTP and make sure the forced password resets are completed. [1][3]
  2. Request incident details from DreamHost and monitor its updates before deciding on further response. [2][3]

Sources

  1. [1]BleepingComputer · Oct 26, 19:26 UTC
    DreamHost forces password resets in ongoing "incident"context
  2. [2]SecurityWeek · Oct 27, 12:02 UTC
    Unexplained DreamHost Incident Prompts Email, FTP Password Resetscontext
  3. [3]Help Net Security · Oct 27, 10:19 UTC
    DreamHost incident triggers password resets, locks customers out of email and FTP accountscontext