Hackers stole DreamHost customer files and inboxes during months-long attack

DreamHost, a web host, was breached by hackers who exploited a vulnerability in its file manager to steal customer emails, credentials, and files during a months-long attack starting in August. The company reset some customer passwords and notified customers after the breach was discovered last week. DreamHost has 400,000 paying customers, and the number of affected customers is 'well under 10%'. The company is investigating the breach and has not disclosed the nature of the vulnerability.