DreamHost Data Breach Exposes User FTP and Webmail Details
Internet hosting provider, DreamHost, has issued a statement regarding a recent data breach that occurred on its File Manager platform. The breach allowed attackers to access customer data for two months, resulting in the exposure of sensitive information.
According to the company, attackers managed to infiltrate the File Manager platform and stole user FTP/SFTP usernames and passwords. This puts the personal information of affected customers at risk.
Affected Customers and Details
- The breach took place between February 1st and April 1st, 2021
- Approximately 120,000 customer accounts may have been compromised
- The stolen data includes FTP/SFTP usernames and passwords
DreamHost's Response
DreamHost has taken immediate steps to address the situation and has reset all affected user passwords. The company is also offering one year of complimentary Password Manager Pro to all customers who were impacted by the breach.
In a statement, DreamHost said, "We are committed to keeping our customers' information secure and are taking proactive steps to protect them from potential misuse of their credentials."
Affected Users Urged to Change Passwords
DreamHost is urging all customers whose accounts may have been compromised to change their passwords immediately. The company is also recommending that users enable two-factor authentication for additional security.
"We strongly advise all affected customers to change their passwords and enable two-factor authentication," the company said. "This will provide an extra layer of protection for their accounts."
Investigation and Security Measures
DreamHost is currently investigating the cause of the breach and has taken steps to enhance its security measures to prevent similar incidents from occurring in the future.
"We are working diligently to determine the cause of this incident and have taken immediate steps to strengthen our security measures," the company said.
Affected Customers Receiving Notification
DreamHost is reaching out to affected customers via email to inform them about the breach and provide guidance on how to protect their accounts.
"We are reaching out to affected customers via email to provide them with details about the breach and offer guidance on how to protect their accounts," the company said.
DreamHost is urging customers to change their passwords and enable two-factor authentication for added security.
<small>Source: Bleeping Computer — read the original story there.</small>
