Help Net Security reported on October 27 that DreamHost, a web hosting company, has brought its File Manager back online. DreamHost said on October 26 that engineers had pushed a fix and that files.dreamhost.com was working again. The trouble began on the afternoon of October 23, when the company said it was looking into connection problems with the File Manager. That evening it said FTP/SFTP access was also involved and that it had begun resetting passwords. It called the resets a precaution. They were finished on October 24.
Some email and FTP/SFTP accounts still need new passwords, DreamHost said. Affected users cannot sign in until the owner of their DreamHost account resets the passwords and passes on the new ones. By October 25, DreamHost said all affected account owners had been emailed instructions. Its status page still listed email hosting, webmail and the File Manager as disrupted. Help Net Security said DreamHost has not given a cause or a count of affected customers. Some customers on Reddit said they were told late and given little detail. One guessed a link to PHP flaws, and DreamHost's support chatbot reportedly denied it. That is customer talk, not a confirmed finding.
For people who run sites on shared hosting, one account owner may control email and file access for a whole team. Teams in that position may need to check who holds the account login and where DreamHost's reset emails were sent. DreamHost warned that it never asks for passwords by email.