DreamHost says hackers stole customer emails and files in months-long attack

The web host said attackers exploited a vulnerability in its file manager to access customer data and session tokens. Fewer than 10% of customers were affected, according to the company.

4 Nov 2026

DreamHost says hackers stole customer emails and files in months-long attack

DreamHost has confirmed that hackers stole customer emails, files and credentials during a cyberattack that lasted several months. The company disclosed the breach last Thursday after an outage that stretched over several days and led it to reset some customer passwords.

In a notice filed with California’s attorney general, DreamHost said the attack began in August. Hackers exploited an unspecified vulnerability in the company’s file manager, which customers use to store files, and obtained session tokens that can allow access to accounts without entering a password.

A DreamHost spokesperson declined to explain why the attack was not detected until last week, citing an ongoing investigation, and did not identify the vulnerability. The company said it was unrelated to vulnerabilities recently discovered in PHP web software.

DreamHost said the number of affected customers was “well under 10%,” but did not provide a more precise figure. The company says it has about 400,000 paying customers across its network.

Sources: TechCrunch.