Cortland Klein

My hosting provider, DreamHost, was storing my password(s) and those of thousands of others in plain text somewhere on their side. Suffice to say this was compromised and all of my websites have been hacked. If DreamHost does not restore all my accounts from backups, I will be forced to restore them manually, a task that will take a few weeks to a few months. Suffice to say I’m a little pissed that I’ll be now spending the next few weeks to months having to fix a problem that was their fault, not mine.

I emailed MediaTemple asking if they store passwords as plain text, but because they are a Tier 4 Certified, they say they can’t say one way or another.

Does anyone know if a Tier 4 Certified hosting provider is allowed to store customers’ passwords in plain text?