DreamHost password resets have blocked affected email and FTP/SFTP users from signing in following an incident that disrupted its File Manager service. As of October 26, the hosting provider said it had sent recovery instructions to all affected account owners, while the incident remained active.
Users must wait for their account owner to establish new credentials before they can regain access. However, DreamHost has not publicly clarified the underlying cause or confirmed whether attackers accessed customer files or messages.
Disruption Began With File Manager Connectivity Problems
DreamHost first reported connection problems involving its File Manager interface on October 23. The impact subsequently extended to other services, prompting the company to reset affected credentials as a precaution.
Over the weekend, the provider distributed recovery instructions in batches. Its latest update confirmed that all affected account owners had received those instructions, although File Manager remained unavailable at the time of publication.
DreamHost provides web hosting, domain registration, business email and cloud services. According to its company information, it serves more than 400,000 customers across over 100 countries and supports at least 1.5 million websites and applications. However, those figures do not indicate how many customers the incident affected.
DreamHost Password Resets Require Account Owner Action
Account owners must set new passwords for affected email and FTP/SFTP users. Until they complete that process, those users cannot log in with their previous credentials.
Meanwhile, DreamHost said it cannot directly contact individual mailbox or FTP users. It therefore asked account owners to notify them through telephone calls, text messages or another available channel.
That communication step matters because affected users may have lost access to the email accounts where they normally receive instructions. Account owners consequently play a central role in restoring access and explaining the disruption.
Customers Urged to Check Email Forwarding Rules
DreamHost also advised account owners to inspect forwarding settings for each email address. They should remove any forwarding destination they do not recognise.
This recommendation raises concerns about possible unauthorised mailbox access. Nevertheless, it does not establish that attackers compromised accounts, and the company has not provided further details confirming such activity.
Additionally, users should change passwords on other services if they reused their previous DreamHost credentials. This advice accompanies the account recovery measures, although the available information does not establish whether anyone obtained those passwords.
Questions Remain About the Incident’s Scope
Some customers have criticised the limited explanation accompanying the DreamHost password resets. Their complaints reflect uncertainty over what happened, which accounts face exposure and whether the incident involved customer data.
At the time of publication, DreamHost had not answered questions about the number of affected accounts or potential exposure of files and messages. Consequently, the incident’s full scope remained unclear while customers worked through the recovery process.
0 responses to “DreamHost Password Resets Follow Ongoing Incident”