DreamHost forces password resets in ongoing "incident"
Summary
Web hosting provider DreamHost has mandated password resets for its email, FTP, and SFTP users due to an ongoing security incident. The incident caused disruptions to the File Manager interface, prompting the protective measure.
IFF Assessment
FOE
The forced password resets indicate a security incident that potentially exposed user credentials or services, which is bad news for defenders.
Defender Context
This incident highlights the importance of robust incident response and communication for service providers. Defenders should be aware of potential credential compromise and advise users to enable multi-factor authentication where available.