{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident · updates",
  "home_page_url": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026",
  "feed_url": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026/feed.json",
  "description": "Since Oct 23 2026, web host DreamHost has been handling an incident that took its File Manager (files.dreamhost.com) offline and disrupted webmail and FTP/SFTP. As a precaution it reset passwords for affected email and FTP/SFTP users, who can't log in until the account owner sets new ones in the DreamHost panel. Notices to customers also say to check every mailbox for forwarding rules and remove unknown destinations, which suggests some mailboxes may have been accessed. DreamHost hasn't said what happened, how many accounts are affected or whether files or mail were exposed. File Manager came back online on Oct 26 and DreamHost is monitoring, but affected users still need new passwords.",
  "language": "en",
  "_pwn": {
    "slug": "dreamhost-email-ftp-password-reset-incident-oct-2026",
    "severity": "medium",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-26-f7cc806b",
      "url": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-26-f7cc806b",
      "title": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: BleepingComputer reports DreamHost also tells owners to remove unknown email forwarding rules and has not answered questions about what was exposed.",
      "content_text": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: BleepingComputer reports DreamHost also tells owners to remove unknown email forwarding rules and has not answered questions about what was exposed.\n\nSource: https://www.bleepingcomputer.com/news/security/dreamhost-forces-email-ftp-sftp-password-resets-in-ongoing-incident/",
      "date_published": "2026-10-26T00:00:00.000Z",
      "external_url": "https://www.bleepingcomputer.com/news/security/dreamhost-forces-email-ftp-sftp-password-resets-in-ongoing-incident/",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-26-9601100d",
      "url": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-26-9601100d",
      "title": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: DreamHost pushes a fix and brings File Manager (files.dreamhost.com) back online, moving the incident to monitoring; password resets are still required for a subset of email and FTP/SFTP users.",
      "content_text": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: DreamHost pushes a fix and brings File Manager (files.dreamhost.com) back online, moving the incident to monitoring; password resets are still required for a subset of email and FTP/SFTP users.\n\nSource: https://www.dreamhoststatus.com/",
      "date_published": "2026-10-26T00:00:00.000Z",
      "external_url": "https://www.dreamhoststatus.com/",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-25-02c88a57",
      "url": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-25-02c88a57",
      "title": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: All impacted account holders emailed reset instructions; File Manager still being restored.",
      "content_text": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: All impacted account holders emailed reset instructions; File Manager still being restored.\n\nSource: https://www.dreamhoststatus.com/",
      "date_published": "2026-10-25T00:00:00.000Z",
      "external_url": "https://www.dreamhoststatus.com/",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-24-88ca63c2",
      "url": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-24-88ca63c2",
      "title": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: Password reset for affected email and FTP/SFTP users completed; account owners told to set new passwords in panel.dreamhost.com.",
      "content_text": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: Password reset for affected email and FTP/SFTP users completed; account owners told to set new passwords in panel.dreamhost.com.\n\nSource: https://www.dreamhoststatus.com/",
      "date_published": "2026-10-24T00:00:00.000Z",
      "external_url": "https://www.dreamhoststatus.com/",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-23-f17b4582",
      "url": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-23-f17b4582",
      "title": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: DreamHost starts investigating connectivity issues with its File Manager interface (files.dreamhost.com).",
      "content_text": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: DreamHost starts investigating connectivity issues with its File Manager interface (files.dreamhost.com).\n\nSource: https://www.dreamhoststatus.com/",
      "date_published": "2026-10-23T00:00:00.000Z",
      "external_url": "https://www.dreamhoststatus.com/",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-23-d63c477b",
      "url": "https://pwn.watch/i/dreamhost-email-ftp-password-reset-incident-oct-2026#2026-10-23-d63c477b",
      "title": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: Incident widens to FTP/SFTP and webmail; DreamHost takes File Manager offline and starts resetting some email and FTP/SFTP passwords as a precaution.",
      "content_text": "DreamHost forces email and FTP/SFTP password resets in an unexplained ongoing incident: Incident widens to FTP/SFTP and webmail; DreamHost takes File Manager offline and starts resetting some email and FTP/SFTP passwords as a precaution.\n\nSource: https://www.dreamhoststatus.com/",
      "date_published": "2026-10-23T00:00:00.000Z",
      "external_url": "https://www.dreamhoststatus.com/",
      "tags": [
        "medium"
      ]
    }
  ]
}