Skip to content
DreamHost
Virginia Beach, United States5 sources
Confirmed:Confirmed by the organisation, a regulator or a securities filing. First reported 4 Nov 2026.
DreamHost confirms hackers stole customer emails and files in months‑long attack
Hackers accessed DreamHost’s systems and stole customer email accounts and file data during a months‑long attack. DreamHost has confirmed the breach and disclosed it after an outage, stating the number of affected customers is under 10% of its base.
- Type
- Data breach
- Sector
- Technology
- First reported
- 4 Nov 2026
- Latest source
- 6 Nov 2026
What to do
- If you have an account, change that password, and anywhere you reused it.
- Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
- Expect phishing that uses your real details. Do not click links in messages about this incident; go to the company's site directly.
- If payment cards were involved, watch statements and ask your bank for a new card.
- If government ID or social security numbers were involved, consider a credit freeze.
- If this is a vendor of yours, ask what of your data they held and whether it was in scope.
- Reset any API keys, SSO trusts or shared credentials you have with them.
- Brief your help desk: attackers often impersonate the breached brand next.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for DreamHost
Sources
5- it.dataconomy.com6 Nov 2026it.dataconomy.com/2026/11/06/dreamhost-afferma-che-gli-hacker-hanno-rubato-email-e-credenziali-dei-clienti
- techradar.com5 Nov 2026DreamHost admits major cyberattack saw hackers steal customer data and access inboxes | TechRadar
- bleepingcomputer.com4 Nov 2026bleepingcomputer.com/news/security/dreamhost-confirms-data-breach-exposed-ftp-logins-and-webmail-sessions
- bleepingcomputer.com4 Nov 2026DreamHost confirms data breach exposed FTP logins and webmail sessions
- techcrunch.com4 Nov 2026Hackers stole DreamHost customer files and inboxes during months-long attack | TechCrunch
Confidence 90% that this is real and correctly placed. Locations are city centroids at best. Spotted an error? Report a correction.