DreamHost Confirms Data Breach Involving Customer Files and Email Inboxes
Web hosting provider DreamHost has confirmed a months-long cyberattack that resulted in the theft of customer emails, files, and credentials. The breach, which began in August, involved hackers exploiting an unspecified vulnerability within the company's file manager to obtain session tokens, allowing unauthorized access to user accounts. The attack caused a multi-day service outage, prompting DreamHost to reset certain customer passwords as a security measure. While the company has not disclosed the exact number of victims, it stated that the affected population is "well under 10%" of its approximately 400,000 paying customers. The company clarified that the breach was unrelated to recent vulnerabilities found in PHP web software.
Topics: credential theft cyberattack data breach web hosting security