--- title: Active incident at Dreamhost forcing password reset description: DreamHost is reporting a service disruption affecting Web Services and Email Services. The File Manager Interface, Email Hosting, and Webmail Interface are... canonical: https://daily.dev/posts/active-incident-at-dreamhost-forcing-password-reset-v1cwmvazv twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Active incident at Dreamhost forcing password reset | daily.dev og:description: DreamHost is reporting a service disruption affecting Web Services and Email Services. The File Manager Interface, Email Hosting, and Webmail Interface are... og:url: https://daily.dev/posts/active-incident-at-dreamhost-forcing-password-reset-v1cwmvazv og:image: https://api.daily.dev/og/posts/V1CWMvAzV.png og:image:alt: Active incident at Dreamhost forcing password reset og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Active incident at Dreamhost forcing password reset **[Hacker News](https://daily.dev/sources/hn)** · 1 min read · 0 upvotes · 0 comments ## Summary DreamHost is reporting a service disruption affecting Web Services and Email Services. The File Manager Interface, Email Hosting, and Webmail Interface are listed as experiencing a service disruption. All other components, including Web Hosting, VPS, Dedicated Server Hosting, Database Hosting, Domain Registrations, and DreamCompute, show as operational. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community take How the wider developer community reacted, aggregated from 3 discussions and 98 comments across hackernews (as of 2026-10-26). **TL;DR:** Long-time customers largely defend Dreamhost as cheap, reliable, and good value, while others worry the forced password reset signals a security breach tied to a File Manager/FTP vulnerability and note the company has been quietly shedding services like mailing list support. **Sentiment:** 20% positive · 45% mixed · 35% skeptical **The case for** - Many long-term customers report years or decades of reliable, low-cost service with few complaints. - Chat support is considered responsive even if email support has declined. - Some view the incident response (proactively resetting passwords) as a reasonable precaution rather than a sign of incompetence. **The pushback** - Speculation that the File Manager (a Monsta FTP install) was compromised via a known PHP vulnerability, possibly exposing plaintext FTP passwords. - Vague, slow-to-update status communications and an unhelpful support chatbot leave customers uncertain about the real cause. - Dreamhost reportedly dropped support for running mailing list software (e.g. Mailman), pushing long-time users to consider leaving. - Concern that a large share of hosted sites are unpatched WordPress/Joomla/Drupal installs vulnerable to compromise. **By community** - hackernews (mixed): Loyal long-time customers praising cost and reliability sit alongside users speculating about a security breach and criticizing vague incident communication. **Hottest debate:** Whether the outage reflects a genuine security compromise of the File Manager/FTP system versus just routine incident response, given the company's vague status updates. **Open questions** - What actually caused the File Manager connectivity issue and whether FTP credentials were exfiltrated. - Whether the incident is related to recently published PHP vulnerabilities despite the company's denial. - How many affected sites are running unpatched CMS software that could have been the entry point. **Highlights** > Reading the tea leaves: given that the outage started with "connectivity issues affecting the File Manager", which was an install of Monsta FTP [1] - a commercial PHP application - I suspect the file manager got popped by one of the recently published PHP vulnerabilities, and users' FTP credentials may have been exfiltrated. [1]: https://www.monstaftp.com/ > — [duskwuff on hackernews · 2 comments](https://news.ycombinator.com/item?id=50234424) > 20 year customer here. This morning I asked their support chatbot if this is related to the PHP vulnerabilities and it assured me that's not the case. I'm skeptical. These status updates from the PHP incident would also have us believe that they were never directly affected: https://www.dreamhoststatus.com/pages/incident/575f0f6068263... They're being awfully vague about this issue so far. 8 hours ago I submitted a ticket requesting more information and they've not responded yet. I guess that they're still in the thick of it. > — [traeregan on hackernews · 1 comments](https://news.ycombinator.com/item?id=50235079) > They abandoned all support for email lists a couple of months back. Will likely move after 20+ years on DH. > — [PaulDavisThe1st on hackernews · 1 comments](https://news.ycombinator.com/item?id=50234809) > I've been a user for more than 20 years. With their shared hosting plan, which was about $5/mo. when I joined and is now $13/mo, I've been able to host my personal blog and professional site, as well as probably 3 dozen other sites over the years, including several that have hit the HN front page and never got hugged by the squeeze of death. Honestly, compared to some of the professional environments I've worked in, it's a joy to have an idea, create a few PHP files, and in a matter of seconds have that idea live. > — [jawns on hackernews](https://news.ycombinator.com/item?id=50234353) > My suspicion is at least half are unpatched WordPress installs. > — [ceejayoz on hackernews · 1 comments](https://news.ycombinator.com/item?id=50234022) **Source threads** - [hackernews](https://news.ycombinator.com/item?id=50231166) · 105 points · 44 comments - [hackernews](https://news.ycombinator.com/item?id=15091223) · 58 points · 54 comments - [hackernews](https://news.ycombinator.com/item?id=45832923) · 1 points · 0 comments ## Similar posts on daily.dev - [Microsoft 365 hit by outage, preventing access to emails and files](https://daily.dev/posts/microsoft-365-hit-by-outage-preventing-access-to-emails-and-files-irywo2f8j) · TechCrunch · 0 upvotes · 0 comments - [Voxihost \(AnduinOS hosting provider\) was down.](https://daily.dev/posts/voxihost-anduinos-hosting-provider-was-down--npli53vuy) · AnduinOS · 23 upvotes · 2 comments - [Cloudflare Global Network experiencing issues](https://daily.dev/posts/cloudflare-global-network-experiencing-issues-bqwigmlzw) · Hacker News · 4 upvotes · 0 comments - [More Than DNS: The 14 hour AWS us-east-1 outage](https://daily.dev/posts/more-than-dns-the-14-hour-aws-us-east-1-outage-m4b0fv6uu) · Lobsters · 1 upvotes · 0 comments --- [View this post on daily.dev](https://daily.dev/posts/active-incident-at-dreamhost-forcing-password-reset-v1cwmvazv) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Active incident at Dreamhost forcing password reset","url":"https://daily.dev/posts/active-incident-at-dreamhost-forcing-password-reset-v1cwmvazv","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/active-incident-at-dreamhost-forcing-password-reset-v1cwmvazv"},"datePublished":"2026-10-25T18:38:01.774Z","dateModified":"2026-10-26T00:23:52.555Z","description":"DreamHost is reporting a service disruption affecting Web Services and Email Services. The File Manager Interface, Email Hosting, and Webmail Interface are...","image":"https://media.daily.dev/image/upload/s--VDukGCjf--/f_auto/v1722860399/public/Placeholder%2002","thumbnailUrl":"https://media.daily.dev/image/upload/s--VDukGCjf--/f_auto/v1722860399/public/Placeholder%2002","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/active-incident-at-dreamhost-forcing-password-reset-v1cwmvazv","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"Active incident at Dreamhost forcing password reset"}]} ```