TechnologyWednesday, November 4, 20261 min read

Hackers stole DreamHost customer files and inboxes during months-long attack

By Zack Whittaker · Via TechCrunch · Published by Everything Blog

In short

DreamHost disclosed the prolonged cyber intrusion after filing a data breach notice with California’s attorney general. The attackers leveraged session tokens to impersonate users and steal private customer emails and login credentials. Although an ongoing investigation prevented the company from detailing why the attack went unnoticed for months, officials clarified the file manager bug was not tied to recent PHP web software flaws.

Key points

Intruders maintained undetected access to the hosting company's network beginning in Augu…: Intruders maintained undetected access to the hosting company's network beginning in August.
The company confirmed the incident affected well under ten percent of its customer base.: The company confirmed the incident affected well under ten percent of its customer base.
The intrusion originated from an undisclosed vulnerability inside the platform's file man…: The intrusion originated from an undisclosed vulnerability inside the platform's file manager tool.

Sources checked by our analysis pipeline: 1

Web host DreamHost has confirmed that hackers stole customer emails and credentials during a months-long cyberattack on its systems. DreamHost disclosed the breach last Thursday after it sparked an outage that spanned several days, during which it reset some customer passwords.

In a data breach notice filed with California’s attorney general, the web host said the attack began in August and allowed hackers to obtain session tokens, which keep users logged in after entering their passwords. If stolen, hackers can break into a system as if they were that user. The company said hackers exploited an unspecified vulnerability in DreamHost’s file manager, which customers use to store their files.

When reached by TechCrunch, a DreamHost spokesperson declined to say why the company did not detect the cyberattack until last week, citing an ongoing investigation. The spokesperson did not say what the vulnerability is. The company said it was unrelated to the vulnerabilities recently discovered in the PHP web software.

DreamHost’s spokesperson said that the number of affected customers is “well under 10%” but would not provide a more accurate figure.…

AI Analysis

Tone

Negative

In short

Key Points

Intruders maintained undetected access to the hosting company's network beginning in Augu…: Intruders maintained undetected access to the hosting company's network beginning in August.
The company confirmed the incident affected well under ten percent of its customer base.: The company confirmed the incident affected well under ten percent of its customer base.
The intrusion originated from an undisclosed vulnerability inside the platform's file man…: The intrusion originated from an undisclosed vulnerability inside the platform's file manager tool.

Topics

Technology

Was this summary useful?

AI Analysis

Tone

Negative

In short

Key Points

Intruders maintained undetected access to the hosting company's network beginning in Augu…: Intruders maintained undetected access to the hosting company's network beginning in August.
The company confirmed the incident affected well under ten percent of its customer base.: The company confirmed the incident affected well under ten percent of its customer base.
The intrusion originated from an undisclosed vulnerability inside the platform's file man…: The intrusion originated from an undisclosed vulnerability inside the platform's file manager tool.

Topics

Technology

Was this summary useful?

French blood banks hit alongside cyberattack on European supermarkets
Hackers manipulated cold storage control systems across critical medical and retail facilities during coordinated overnight digital breaches. While on-duty medical personnel swiftly moved stored blood into offline units to avert contamination, commercial food sellers across eight nations suffered severe inventory losses. The incidents have intensified European Union security anxieties regarding connected infrastructure amid ongoing geopolitical tensions tied to the war in Ukraine.
1 min read
How I learned to love an obnoxious phone grip
Bulky modern smartphones like foldable models are pushing consumers toward whimsical, tactile accessories that combine ergonomic support with vibrant personal flair. Buyers seeking an antidote to muted corporate phone designs are adopting detachable, magnetic attachments shaped like food or bold objects. This trend provides critical one-handed utility while transforming uniform electronics into expressive statements.
4 min read
Bose’s QuietComfort Headphones are more than half off
Major retailers including Amazon, Best Buy, and Bose have rolled out steep price cuts across two generations of the premium QuietComfort lineup. The promotions allow consumers to secure high-tier active noise cancellation and multipoint audio starting at match-record lows. These significant reductions present a rare, high-value entry point for buyers comparing older flagships against freshly released hardware.
1 min read

Hackers stole DreamHost customer files and inboxes during months-long attack

In short

Key points

More in Technology