DreamHost says attackers had unauthorized access to its web-based File Manager from August until October 23, giving them a foothold for about two months. The company reports the attackers obtained customers’ FTP/SFTP logins and also stole certain webmail session information, which can be used to bypass password-based protections depending on how sessions are handled.
Outlets agree on the core timeline and that the breach centers on the File Manager platform. Bleeping Computer and Dev.to emphasize what customers may need to do, including resetting affected credentials and checking for suspicious changes. TechCrunch’s framing, based on the provided material, highlights the confirmation of the breach and the exposure of FTP and webmail elements. Across the coverage, the differing emphasis is on customer impact and remediation steps versus broader security implications of session compromise.
