Overview of the Incident
DreamHost has forced password resets for email and FTP/SFTP users due to an ongoing incident that disrupted access to the File Manager interface. All affected account owners have received recovery instructions. Users will be unable to log in until their account owners set new credentials. This guide will provide detailed information on the incident and steps to take for affected users.
DreamHost Background
DreamHost is a U.S. web hosting provider and domain registrar that offers various services including WordPress hosting, business email, virtual private servers, dedicated servers, and cloud services. It serves over 400,000 customers in more than 100 countries and supports at least 1.5 million websites and applications, including 750,000 WordPress installations.
Incident Details
On October 23, DreamHost reported connectivity problems affecting its File Manager interface. The incident quickly expanded to other services. The company responded by blocking access to all users until they completed password resets, described as a precaution. Over the weekend, the company sent out recovery instructions in batches and notified all affected account holders.
Steps for Affected Users
- Receive Recovery Instructions: All affected account owners have received recovery instructions. Users will be unable to log in until their account owners set new credentials.
- Change Passwords: Users are advised to change their passwords, especially if they reused their old DreamHost password on other platforms/services. This is to prevent unauthorized access.
- Review Email Forwarding Rules: Users are advised to review each email address for forwarding rules and remove any forwarding destination they do not recognize.
- Contact Affected Users: Users are recommended to notify affected users by phone, text, or other means, as those whose passwords were reset may be unable to access their email accounts.
Additional Recommendations
- Check for Breaches: Users are advised to check if their email accounts may have been breached and exposed to external actors. However, DreamHost did not provide additional details on this aspect.
- Stay Informed: Users are encouraged to stay informed and follow any further updates from DreamHost regarding the incident.
Conclusion
DreamHost's password reset initiative is a precautionary measure to ensure the security of its users' accounts. Users are advised to take the necessary steps to secure their accounts and stay informed about the ongoing incident. For more information, users are encouraged to contact DreamHost directly or follow their official announcements for updates.
Tags
DreamHost, Password Reset, File Manager, Security Incident, Email Breach, FTP/SFTP