DreamHost forced email and FTP password resets. It has not said what went wrong.
By Lior AharonovFounder, 7IT Solutions ·
What happened
DreamHost reported File Manager problems on Friday 23 October, then forced password resets for email and FTP/SFTP users as a precaution, so users cannot log in until the account owner sets new credentials. SecurityWeek reported on 27 October that a File Manager fix was deployed on Monday. DreamHost has given no cause and no count of affected accounts.
Why it matters
A client's mailbox or a deploy login on a site you host may be locked out right now. DreamHost has not confirmed a breach, but it tells owners to check mail forwarding rules for addresses they do not recognize.
What to do
If you host on DreamHost, set new passwords for every email and FTP/SFTP user, remove forwarding destinations you do not recognize, and change the old password anywhere you reused it.
My take
Lior Aharonov
Founder, 7IT Solutions
No cause given means no all-clear. Rotate first, wait for the post-mortem second.
Sources
Researched with AI tools; every fact is checked against the linked sources.