DreamHost Cyberattack Exposes Customer Files and Inboxes via Prolonged Breach

A months-long cyberattack on DreamHost allowed hackers to steal customer files and inboxes by exploiting a file manager vulnerability, with session tokens enabling unauthorized access. The breach affected under 10% of DreamHost's 400,000 customers, though the exact number and specific vulnerability remain undisclosed.

The web host said hackers exploited a vulnerability to access customer emails and files during a "deliberate attack."

Read original article