DreamHost confirms data breach exposed FTP logins and webmail sessions

DreamHost has confirmed a data breach in which attackers gained unauthorized access to its File Manager platform for approximately two months. During this period, threat actors were able to steal customers' FTP and SFTP usernames and passwords, as well as webmail session data. The breach affected customers who used DreamHost's File Manager and webmail services. The exposure of FTP/SFTP credentials poses significant risk as attackers could use them to access and modify hosted websites. DreamHost has notified affected customers and is urging them to change their credentials. The two-month window of unauthorized access suggests the intrusion may have gone undetected for an extended period, raising concerns about detection and response capabilities.