DreamHost, a Los Angeles-based web hosting services provider and domain name registrar, has confirmed that it may have been the victim of an attack on its servers. In a post on its DreamHost Status blog, the company says that it "detected some unauthorized activity" in one of its databases and is now requiring customers to change their FTP/shell passwords as a precautionary measure.
In an email to its customers, DreamHost notes that, of the three different types of passwords used for accessing the web panel and email, and for FTP/Shell access, only the latter appears to have been compromised in the breach. Web panel and email passwords as well as billing information are not affected and were reportedly not accessed.

The link for this article located at H Security is no longer available.