On 4 November 2026 BleepingComputer reported DreamHost confirmed unauthorised access to its web File Manager (files.dreamhost.com) from about August to 23 October 2026. FTP/SFTP usernames and passwords of users who logged into File Manager in that window were stolen; some webmail sessions may also have been exposed for a limited set of users. DreamHost said it found no evidence of control-panel or billing access, invalidated passwords and fixed the flaw.

What it means: Greek businesses or freelancers hosted on DreamHost should treat FTP/SFTP credentials as compromised if the web File Manager was used in the window: rotate passwords everywhere they were reused, hunt webshells and email forwarding rules. Prefer SSH keys over passwords and restrict source IPs. Even if you are not a DreamHost customer, the incident shows hosting panels and file managers are high-value targets—require MFA, per-environment credentials and file-integrity monitoring. Hosting contracts should include breach-notice terms and time SLAs. Teams sharing FTP with external developers must rotate access immediately. Check DNS and certificates for unauthorised changes. US credit-monitoring offers matter less in the EU; focus on technical containment and DPA notifications when thresholds are met. In practice, teams should name an owner, update the risk register and agree success criteria within 30 days. Where suppliers or customers are affected, send a short notice that points to the primary source and avoids overstated claims. Compliance, cybersecurity and payments operations are linked; a change in one area often requires a pass over contracts, access rights and continuity plans. Finally, keep a review date so the item becomes concrete actions for the Greek business rather than newsletter noise alone.

Read the original on BleepingComputer

Related service: Custom software

Related stories