Hackers stole DreamHost customer files and inboxes during months-long attack

Web big DreamHost has confirmed that hackers stole lawsuit emails and credentials during a months-long cyberattack connected its systems. DreamHost disclosed the breach past Thursday aft it sparked an outage that spanned respective days, during which it reset immoderate lawsuit passwords.

In a data breach notice filed with California’s lawyer general, the web big said the onslaught began successful August and allowed hackers to get league tokens, which support users logged successful aft entering their passwords. If stolen, hackers tin interruption into a strategy arsenic if they were that user. The institution said hackers exploited an unspecified vulnerability successful DreamHost’s record manager, which customers usage to store their files. 

When reached by TechCrunch, a DreamHost spokesperson declined to accidental wherefore the institution did not observe the cyberattack until past week, citing an ongoing investigation. The spokesperson did not accidental what the vulnerability is. The institution said it was unrelated to the vulnerabilities precocious discovered in the PHP web software.

DreamHost’s spokesperson said that the fig of affected customers is “well nether 10%” but would not supply a much close figure. The web big touts some 400,000 paying customers crossed its network.