DreamHost Admits Major Cyberattack Steals Data

Web hosting provider DreamHost confirmed hackers exploited a File Manager vulnerability in August 2026 to steal FTP/SFTP credentials and webmail session data from customers. The company reset affected passwords, offered one year of free credit monitoring through Equifax, and stated no billing details were accessed while the investigation remains ongoing.