A mandatory password reset has been imposed on email and FTP/SFTP users at DreamHost following an operational incident that compromised File Manager connectivity. The web hosting company has distributed recovery instructions to all impacted account owners, preventing login access until new credentials are established.

DreamHost operates as a U.S.-based hosting and domain registration provider, offering WordPress hosting, business email services, virtual private servers, dedicated infrastructure, and cloud solutions. The company reports serving more than 400,000 customers across more than 100 countries, hosting at least 1.5 million websites and applications, with 750,000 WordPress installations among them.

The incident began on October 23 when connectivity problems emerged affecting the File Manager interface. The disruption rapidly spread to additional services, prompting the company to restrict all user access pending completion of password resets as a protective measure.

DreamHost distributed recovery instructions in phases over the weekend, notifying all affected account holders of the situation. At the time of publication, the incident remained unresolved, with File Manager access continuing to be unavailable.

In communications to impacted customers, DreamHost instructed users to examine each email account for forwarding rules and eliminate any forwarding destinations that appear unfamiliar. This guidance implies potential unauthorized access to email accounts, though the company has not disclosed specifics regarding the breach.

Long-standing customers have expressed frustration over the limited transparency surrounding the incident. One customer stated, "It's disturbing to get these emails with zero explanation what's going on, and very frustrating that user community has to guess."

DreamHost has advised users to modify any passwords reused on other services if their previous DreamHost credentials were duplicated elsewhere. The company also noted its inability to contact individual mailbox or FTP users directly, requesting that account owners inform affected users through phone, text, or alternative channels, since those with reset passwords may lack email access.

Multiple inquiries to DreamHost regarding incident specifics, the total number of compromised accounts, and whether files or messages were accessed have gone unanswered as of publication.