DreamHost said hackers exploited a file-manager vulnerability from August, stealing customer emails, credentials and session tokens before a multi-day outage exposed the breach. Fewer than 10% of its roughly 400,000 paying customers were affected; the flaw was unrelated to recent PHP vulnerabilities