Web hosting giant **DreamHost** has initiated a widespread password reset campaign for its email and FTP/SFTP users, a direct consequence of an ongoing “incident” that has significantly impacted its services. The disruption, which began on October 23 with connectivity issues affecting the File Manager interface, quickly escalated to encompass other critical services.  ### Precautionary Measures and User Impact In response to the expanding incident, **DreamHost** proactively blocked user access across its platform, making password resets a mandatory step for re-entry. The company asserts this measure is purely precautionary. Over the past weekend, **DreamHost** began distributing recovery instructions to affected account owners in batches. Users are currently unable to log in until new credentials are established by the account owner. ### A Cloud of Uncertainty As of this report, the incident remains active, and access to the File Manager interface is still unavailable. **DreamHost** has advised impacted account holders to meticulously review email forwarding rules and remove any unrecognized destinations. This recommendation hints at potential email account breaches and unauthorized access by external actors, though **DreamHost** has not provided explicit details. ### Customer Frustration and Speculation The lack of transparency from **DreamHost** has fueled frustration and speculation among its long-standing customer base. One customer voiced concerns on Hacker News, stating, "It's disturbing to get these emails with zero explanation what's going on, and very frustrating that user community has to guess." Users are also being urged to update any passwords they may have reused across other platforms, a standard security recommendation in the event of a potential credential compromise. ### Communication Challenges **DreamHost** acknowledges its inability to directly contact individual mailbox or FTP users. Account owners are therefore tasked with notifying their affected users through alternative communication channels, such as phone or text, given that email access may be compromised for those whose passwords have been reset. Despite multiple attempts by BleepingComputer to solicit further details regarding the incident's nature, the number of affected accounts, and potential data exposure, **DreamHost** has yet to provide a response.