DreamHost forces password resets during ongoing incident

DreamHost has forced password resets for email and FTP/SFTP users after an incident disrupted connections to its File Manager interface. The web hosting provider says all affected account owners have received recovery instructions. Users cannot log in until their account owner sets new credentials.

The company first reported connectivity problems with File Manager on October 23. The impact later expanded to other services, and DreamHost blocked access until users completed password resets, describing the move as a precaution. As of publication, the incident remains active and File Manager is still unavailable.

DreamHost's notices advise affected account holders to check email forwarding rules and remove any destination they do not recognize. This raises the possibility that some email accounts were breached, but DreamHost has provided no further details. The company also says account owners should notify affected mailbox and FTP users directly, since users whose passwords were reset may not be able to access their email.

Some customers have criticized the lack of information. BleepingComputer says it contacted DreamHost multiple times to ask about the incident, the number of affected accounts, and whether files or messages were exposed, but had received no response by publication.