DreamHost, my favorite web host, yesterday announced that there had been a cyber-break-in at their facilities.

A very small subset of our user accounts have been compromised due to a security flaw in our web control panel software. We have already notified those of you affected directly via email…

The security flaw allowed the attackers to log into our customer web control panel with the access privileges of another user. From our web panel they were able to access individual user password information. The attackers also attempted to gain access to our central database and billing information but were ultimately thwarted in that attempt. No credit card information or customer personal information was obtained.

We will soon be making an official post about this situation and the steps being done to safeguard accounts in the future on the DreamHost blog…