Web hosting provider DreamHost has confirmed that hackers accessed customer emails and credentials during a cyberattack that went undetected for several months. The company disclosed the breach after a multi-day outage and password resets for some users. According to a notice filed with California’s attorney general, the attack began in August and allowed hackers to obtain session tokens, which can let attackers access systems as legitimate users. The vulnerability exploited was in DreamHost’s file manager, though the company has not specified further details, citing an ongoing investigation.
DreamHost stated that the breach was not related to recent PHP vulnerabilities and that fewer than 10% of its 400,000 customers were affected. The company declined to explain why the attack was not detected earlier or to provide a more precise figure for those impacted. The incident has triggered concern among businesses relying on DreamHost for hosting sensitive data.
For banks, insurers, and healthcare firms, the breach highlights the importance of reviewing third-party hosting risks and ensuring robust incident response plans. Regulators and clients may seek more transparency on detection and notification timelines. The investigation’s outcome and any regulatory response will be closely watched.
