Hackers stole DreamHost customer files and inboxes during months-long attack

查看原文 / View Original 编辑 / Edit

In Brief Posted: 12:36 PM PST · November 4, 2026 Image Credits:Thomas Fuller/SOPA Images/LightRocket / Getty Images Zack Whittaker Hackers stole DreamHost customer files and inboxes during months-long attack

简讯发布时间：2026年11月4日太平洋标准时间下午12:36 图片来源：Thomas Fuller/SOPA Images/LightRocket / Getty Images Zack Whittaker 黑客在长达数月的攻击中窃取了DreamHost客户的文件和收件箱。

Web host DreamHost has confirmed that hackers stole customer emails and credentials during a months-long cyberattack on its systems. DreamHost disclosed the breach last Thursday after it sparked an outage that spanned several days, during which it reset some customer passwords.

网络托管服务商DreamHost已证实，黑客在对其系统进行长达数月的网络攻击期间，窃取了客户的电子邮件和凭据。DreamHost在上周四披露了此次泄露事件，此前该事件引发了持续数天的服务中断，期间公司重置了部分客户的密码。

In a data breach notice filed with California’s attorney general, the web host said the attack began in August and allowed hackers to obtain session tokens, which keep users logged in after entering their passwords. If stolen, hackers can break into a system as if they were that user.

在提交给加利福尼亚州总检察长的数据泄露通知中，该托管商表示攻击始于8月，黑客借此获取了会话令牌，这些令牌用于在用户输入密码后保持登录状态。如果被盗，黑客可以像该用户一样侵入系统。

The company said hackers exploited an unspecified vulnerability in DreamHost’s file manager, which customers use to store their files. When reached by TechCrunch, a DreamHost spokesperson declined to say why the company did not detect the cyberattack until last week, citing an ongoing investigation.

该公司称，黑客利用了DreamHost文件管理器中一个未指明的漏洞，该管理器是客户用于存储文件的工具。当TechCrunch联系DreamHost时，其发言人以调查正在进行为由，拒绝说明为何公司直到上周才发现此次网络攻击。

The spokesperson did not say what the vulnerability is. The company said it was unrelated to the vulnerabilities recently discovered in the PHP web software. DreamHost’s spokesperson said that the number of affected customers is “well under 10%” but would not provide a more accurate figure. The web host touts some 400,000 paying customers across its network.

该发言人未说明漏洞的具体内容。公司表示，这与最近在PHP网络软件中发现的漏洞无关。DreamHost的发言人称，受影响的客户数量“远低于10%”，但拒绝提供更准确的数字。该托管商声称其网络拥有约40万名付费客户。