DreamHost confirms months-long data breach compromised customer accounts
Web hosting provider DreamHost has confirmed that attackers gained unauthorized access to customer emails and files through a vulnerability exploited since August.
DreamHost reported a significant security incident involving unauthorized access to its systems. The company disclosed that attackers exploited a vulnerability within its file manager, allowing them to intercept sensitive customer information and compromise accounts for several months.
The breach, which began in August, involved the theft of session tokens. By acquiring these tokens, attackers bypassed authentication protocols to access user accounts as if they were the legitimate owners. The incident came to light following a multi-day service outage that forced the company to reset passwords for affected users.
Company representatives have declined to comment on the delay in detecting the intrusion, citing an ongoing investigation. While the provider maintains roughly 400,000 customers, it estimates that the number of affected accounts remains below 10%.