DreamHost, a popular web hosting company, has confirmed that hackers stole customer files, emails, credentials, and session tokens during an attack that lasted for months. TechCrunch reported the breach on 4 November 2026, after DreamHost had a multi-day outage.
The attack began in August 2026. Hackers used a weakness in DreamHost’s file manager to get inside the system and steal customer data.
What happened
- Attack started: August 2026
- Disclosed: Week of 4 November 2026, after a multi-day outage
- What was stolen: Customer emails, credentials, session tokens, and files
- How: A vulnerability in DreamHost’s file manager
- How many affected: “Well under 10%” of customers, according to DreamHost
- Total customers: About 400,000 paying customers
- Action taken: Passwords reset for some customers; breach notice filed with the California Attorney General
DreamHost has about 400,000 paying customers, and it says well under 10 per cent of them were affected.
What DreamHost users should do now
If you use DreamHost, change your password now, turn on two-step verification, and keep a backup of your website files. If you use the same password anywhere else, change it there too.
Source: TechCrunch, 4 November 2026.
Related articles on HimachalGovt
- Apple Reportedly Cuts Internal AI Spending: Daily Cap Down from $300 to $200 — https://himachalgovt.com/stories/apple-reportedly-cuts-internal-ai-spending-daily-cap-down-from-300-to-200
- India Beat New Zealand by 5 Wickets in 1st ODI: Kohli’s 74 Leads the Chase — https://himachalgovt.com/stories/india-beat-new-zealand-by-5-wickets-in-1st-odi-kohlis-74-leads-the-chase
- How Credit Card Interest (APR) Actually Works in the USA — A Simple Guide — https://himachalgovt.com/stories/how-credit-card-interest-apr-actually-works-in-the-usa-a-simple-guide/
