DreamHost has confirmed that an attacker broke into the server behind its browser-based File Manager and accessed the FTP and SFTP logins of users who signed in between roughly August 2026 and October 23, 2026. The DreamHost FTP password leak is about your website files: those passwords may have been enough to change your site before DreamHost reset them.
