Hackers stole DreamHost customer files and inboxes during months-long attack

DreamHost disclosed that hackers exploited a vulnerability in its systems to access customer emails and files over a period spanning months, describing the incident as a deliberate attack. The Los Angeles-based web hosting and domain registrar, which serves roughly 400,000 customers, said the intruders used the flaw to reach stored files and inboxes rather than to compromise passwords alone. The company has not publicly pinpointed the exact number of affected accounts, but the exposure of both email contents and hosted files raises the stakes for small businesses that rely on DreamHost for mail and storage. The breach adds to a steady drumbeat of incidents traced to unpatched software, and it underscores how a single flaw at a hosting provider can ripple across thousands of downstream customers. What to watch next: DreamHost’s notification timeline and any regulatory filings, plus whether the company details the vulnerability and confirms whether credentials or payment data were also exposed.