Plan
active
DreamHost forces FTP/SFTP/email password resets amid ongoing incident
- Engineer — Plan: If your org hosts anything on DreamHost, verify the forced credential resets completed for all FTP/SFTP and email accounts and review access logs since the incident began for any unauthorized file access.
- SOC/IR — Skip
- Leader — Plan: Confirm whether your organization uses DreamHost for any hosting services; if so, request an incident scope update from them and verify all affected credentials have been rotated by impacted teams.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.