DreamHost has confirmed a long-term system compromise that began in August 2026.
Attackers exploited a vulnerability within the company's file management tool to access customer emails and exfiltrate session tokens.
The incident affected under 10% of their 400,000 paying customers and resulted in intermittent service disruptions.
In response, the company has forced password resets for affected accounts.
Details regarding the detection timeline remain limited due to an ongoing investigation.
How did the attack happen?
The attackers exploited a security flaw in the company's file management tool, which allowed them to access customer emails and digital keys that allow users to stay logged in without entering a password. DreamHost said the issue is not related to other recent security flaws in web software.
Who is affected?
The company said that of its approximately 400.000 paying customers, less than 10% were affected. As a result, the company has implemented a mandatory password reset for a group of users. The breach also caused service disruptions, with outages lasting several days.
The company's stance
DreamHost did not provide answers as to why the breach was not detected earlier, stating that the investigation into the incident is still ongoing.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)