DreamHost elektron pochta va FTP/SFTP foydalanuvchilari uchun parollarni qayta o'rnatishni majbur qildi — bu File Manager interfeysiga ulanishni buzgan hodisa bilan bog'liq.
Veb-xosting provayderining so'nggi yangilanishida ta'kidlanishicha, barcha ta'sirlangan hisob egalari tiklash bo'yicha ko'rsatmalarni olgan. Foydalanuvchilar hisob egasi yangi ma'lumotlarni o'rnatmaguncha tizimga kira olmaydi.
DreamHost — AQSh veb-xosting provayderi va domen registratori bo'lib, WordPress xostingi, biznes elektron pochtasi, virtual xususiy serverlar, ajratilgan serverlar va bulut xizmatlarini taklif qiladi.
Kompaniya sahifasiga ko'ra, u 100 dan ortiq mamlakatda 400 000 dan ortiq mijozga xizmat ko'rsatadi va kamida 1,5 million veb-sayt va ilovani, jumladan 750 000 WordPress o'rnatilishini qo'llab-quvvatlaydi.
DreamHost dastlab 23-oktabrda File Manager interfeysiga ta'sir qilgan ulanish muammolarini xabar qilgan, ammo ta'sir tezda boshqa xizmatlarga ham kengaygan.
Kompaniya barcha foydalanuvchilarga parollarni qayta o'rnatmaguncha kirishni bloklash orqali javob bergan — bu ehtiyot chorasi sifatida tavsiflangan.
Dam olish kunlari davomida kompaniya tiklash ko'rsatmalarini partiyalarda yuborgan va barcha ta'sirlangan hisob egalarini xabardor qilgan.
Nashr etilish vaqtidagi holatga ko'ra, hodisa hali ham faol va File Managerga kirish hali ham mavjud emas.
Ta'sirlangan hisob egalariga yuborilgan bildirishnomalarda kompaniya foydalanuvchilarga har bir elektron pochta manzilini yo'naltirish qoidalari (forwarding rules) bo'yicha tekshirishni va tanimagan har qanday yo'naltirish manzilini o'chirishni tavsiya qiladi.
Bu ba'zi elektron pochta hisoblari buzilgan va tashqi shaxslarga ochilgan bo'lishi mumkinligini ko'rsatadi, ammo DreamHost qo'shimcha tafsilotlar bermagan.
Uzoq yillik mijozlar ham DreamHostdan ma'lumot yetishmasligidan shikoyat qilmoqda, bu esa ba'zilarini nima sodir bo'lganini taxmin qilishga undagan.
"Nima bo'layotganiga hech qanday tushuntirishsiz bu elektron xatlarni olish bezovta qiladi va foydalanuvchilar jamoasi taxmin qilishga majbur bo'lishi juda xafa qiladi", — dedi bir mijoz.
Foydalanuvchilarga, agar ularning eski DreamHost paroli boshqa platforma/xizmatlarda qayta ishlatilgan bo'lsa, o'sha joylarda ham parollarni o'zgartirish tavsiya etiladi.
DreamHost shuningdek, alohida pochta qutisi yoki FTP foydalanuvchilari bilan bevosita bog'lana olmasligini aytib, hisob egalarini ta'sirlangan foydalanuvchilarni telefon, SMS yoki boshqa usullar orqali xabardor qilishga chaqirgan, chunki parollari qayta o'rnatilganlar o'z elektron pochta hisoblariga kira olmasligi mumkin.
BleepingComputer DreamHost bilan hodisa, ta'sirlangan hisoblar soni va fayllar yoki xabarlar ochilganligi haqida bir necha bor savollar bilan bog'langan, ammo nashr etilish vaqtidagi holatga ko'ra javob olmagan.
Hujumchilar haqiqiy ma'lumotlarga ega bo'lgach, ularning harakatlarining faqat 37 foizi bloklanadi
Umumiy oldini olish ko'rsatkichlari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy ma'lumotlardan foydalanganda, oldini olish keskin pasayadi.
Blue Report 2026 mijozlar ishlab chiqarish muhitlarida o'tkazilgan 338 million simulyatsiya bo'yicha texnika-texnika himoyani o'lchaydi.
Hisobotni oling
DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface.
The latest update from the web hosting provider notes that all affected account owners have received recovery instructions. Users will be unable to log in until their account owner sets new credentials.
DreamHost is a U.S. web hosting provider and domain registrar that offers WordPress hosting, business email, virtual private servers, dedicated servers, and cloud services.
According to the company page, it serves over 400,000 customers in more than 100 countries and supports at least 1.5 million websites and applications, including 750,000 WordPress installations.
DreamHost initially reported connectivity problems affecting its File Manager interface on October 23, but the impact quickly expanded to other services.
The company responded by blocking access to all users until they completed password resets, an action described as a precaution.
Over the weekend, the company sent out recovery instructions in batches and notified all affected account holders.
As of publishing, the incident remains active and access to File Manager is still unavailable.
In notifications to impacted account holders, the company advises users to also review each email address for forwarding rules and remove any forwarding destination they do not recognize.
While this suggests that some email accounts may have been breached and exposed to external actors, DreamHost did not provide additional details.
Long-time customers are also complaining about the lack of information from DreamHost, leading some of them to speculate about what happened.
"It's disturbing to get these emails with zero explanation what's going on, and very frustrating that user community has to guess," one customer said.
Users are also recommended to change reused passwords elsewhere if their old DreamHost password was reused on other platforms/services.
DreamHost also said it cannot contact individual mailbox or FTP users directly, urging account owners to notify affected users by phone, text, or other means, as those whose passwords were reset may be unable to access their email accounts.
BleepingComputer has contacted DreamHost multiple times with questions about the incident, the number of impacted accounts, and whether files or messages were exposed, but we have not heard back as of publication.
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report