DreamHost reset every mailbox password, and could not reach the mailbox owners
DreamHost reset every mailbox password, and could not reach the mailbox owners DreamHost forced password resets for email and FTP/SFTP users after an incident that began with connectivity problems in its File Manager interface on October 23 and spread to other services. The company blocked access for all users until they completed a reset, described the step as a precaution, and sent recovery…
In a recent incident, DreamHost, a company that hosts over 400,000 customers worldwide, forced password resets for all email and FTP/SFTP users due to connectivity issues in its File Manager interface. The company began blocking access to all users on October 23 and sent recovery instructions in batches on the weekend. Despite the ongoing nature of the incident, DreamHost's File Manager remained inaccessible.
The company advises users to review their email addresses for any unrecognized forwarding rules and to remove them. This recommendation is crucial as forwarding rules are a persistence mechanism that survives a password reset and does not rely on malware on the user's device. The company also advised users to change reused passwords on other services and to notify their users through alternative channels, as DreamHost could not contact mailbox or FTP users directly.
However, BleepingComputer reported that DreamHost had not provided the number of impacted accounts or whether files or messages were exposed, leading to concerns from long-time customers about the lack of detail.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
