Dreamhost Hacked - Password changes mandated

[Josh]

Last night we detected some unauthorized activity within one of our databases. While we don’t have evidence that customer passwords were taken at this time, we’re forcing a change out of caution. Please login to our web panel and change any passwords you may have with us. We’ll keep this post updated as we get more information.

Update Jan 20th, 9:45am PST: We are doing this for all customers and we will be changing all Shell/FTP user passwords.

Update Jan 20th, 10:00am PST: We have started the process of changing all Shell/FTP passwords now. After we complete the password changes, all FTP/shell user passwords MUST be changed by you in the panel.

To edit your password in the panel, please log into the web panel and go to Manage Users. Click edit next to the FTP/shell user on the right and you can change your password there. — Oscar P

Update Jan 20th, 10:20am PST: The process for changing all passwords is still going. After we complete the password changes, all FTP/shell passwords MUST be changed by you in the panel.

To edit your password in the panel, please log into the web panel and go to Manage Users. Click edit next to the FTP/shell user on the right and you can change your password there.

Update Jan 20th, 10:59am PST: We apologize for any confusion as to what the current procedure needs to be. We recommend you change your password for any FTP/shell user you have with us, right now.

If you’ve already changed your password this morning, thank you for being so quick! We are still running through all FTP/shell users, just in case, so it’s possible we’ll change it out from under you again. We apologize for this duplication of effort, but we’re trying to get things secure as quickly as possible. — Brian H

Update Jan 20th, 11:12am PST: Currently, our web panel is a bit overwhelmed and is showing intermittent access. We’re working on fixing this issue, so passwords can be updated. — Brian H

Update Jan 20th, 11:32am PST: We’re still working on getting the panel back up and running and apologize for the delay. — Brian H

Update Jan 20th, 11:55am PST: Web panel slowly returning to normal. We are still working on getting it 100% restored, so be aware you may see some downtime there, for the time being. — Brian H

More at dreamhost blog

[tranglos]

Thanks for the heads-up! And, Bother!

[y0himba]

Well that was fun.  I forgot how many domains/users/passwords I had over there....