DreamHost forces email and FTP/SFTP password resets in ongoing incident

DreamHost has forced password resets for email and FTP/SFTP users following an incident that began with File Manager connectivity problems on October 23, 2026 and expanded to FTP/SFTP and webmail. The web hosting provider, which says it serves over 400,000 customers and at least 1.5 million websites, blocked access as a precaution and sent recovery instructions in batches over the weekend. Its status page said on October 25 that all impacted account holders had been emailed step-by-step instructions, that users cannot log in until their account owner sets new credentials, and that work on restoring the File Manager continues. As of BleepingComputer's October 26 report, the incident remains active and File Manager access is still unavailable.

DreamHost advised account holders to review each email address for forwarding rules and remove any forwarding destination they do not recognize. The company has not stated the cause of the incident, whether files or messages were exposed, or how many accounts were affected, and BleepingComputer said it had contacted DreamHost multiple times without a response as of publication. No record count has been stated, so this is prepared as a Cybersecurity item, not a Breaches add.

Sources: BleepingComputer; DreamHost Status