DreamHost Resets Some Customer Passwords After System Issue

DreamHost suspended its File Manager service at files.dreamhost[.]com over the weekend and reset some customers’ email and FTP/SFTP passwords after identifying what it described as “an issue” with its systems. The hosting provider did not explain the cause or say whether passwords had been accessed. It warned account owners on Friday that affected users would need to set new passwords, and said only account owners could do this for their email and FTP users. DreamHost also cautioned that it would not ask customers to reset passwords by email, and advised changing any reused passwords on other services.

DreamHost said it had developed and deployed a fix for File Manager and restored access to files.dreamhost[.]com. On Monday, the company said it was monitoring the service to check it was fully operational. Customers raised concerns about the lack of detail, including speculation that passwords might have been compromised and questions about how they were stored; these concerns were not confirmed. DreamHost had not disclosed how many users were affected or the incident’s root cause.