DreamHost forces FTP/SFTP/email password resets amid ongoing incident

Tue, 27 Oct 2026 16:34:51 +0000

Engineer — Plan: If your org hosts anything on DreamHost, verify the forced credential resets completed for all FTP/SFTP and email accounts and review access logs since the incident began for any unauthorized file access.
SOC/IR — Skip
Leader — Plan: Confirm whether your organization uses DreamHost for any hosting services; if so, request an incident scope update from them and verify all affected credentials have been rotated by impacted teams.

Credential-Reset on CuraSec