# DreamHost discloses stolen FTP credentials and possible webmail exposure

_Published Wednesday, November 4, 2026 at 4:03 PM EST · Security · Latest · Tier 2 — Notable_

![DreamHost discloses stolen FTP credentials and possible webmail exposure — Primary](https://www.bleepstatic.com/content/hl-images/2026/11/04/DreamHost.jpg)

DreamHost says attackers stole FTP/SFTP usernames and passwords through a vulnerability in its web-based File Manager, BleepingComputer reported. Its breach notification identifies an exposure period from August 2026 to October 23, 2026, when the intrusion was discovered, adding detail to its earlier warning requiring password resets.

The attacker may also have accessed webmail session information, including credentials, for a limited number of users. DreamHost says it blocked access, fixed the vulnerability, ended potentially affected sessions and invalidated passwords.

Notification recipients are advised to check website files for unauthorized changes and review webmail forwarding rules. DreamHost says it found no evidence of access to control panel logins or billing/payment details.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/dreamhost-confirms-data-breach-exposed-ftp-logins-and-webmail-sessions/)

---
Canonical: https://techandbusiness.org/newswire/exC3zwoJLvod8gsxKpSmjP
Published: 2026-11-04T21:03:49.721Z
Story chronology: 2026-11-04T19:05:19.000Z
Retrieved: 2026-11-04T22:59:10.575Z
Publisher: Tech & Business (techandbusiness.org)