Dropbox says about 5,000 accounts compromised in August hack
Hackers viewed and downloaded files in fewer than a third of the affected accounts, and Dropbox said it removed Lenovo ID links and tightened sign-in rules.
- On Tuesday, Dropbox confirmed that around 5,000 accounts were compromised last month through a security flaw in its single sign-on integration with Lenovo IDs, with hackers viewing and downloading stored content.
- An issue with Lenovo's email verification process allowed unauthorized parties to register Lenovo IDs using victims' email addresses, which Lenovo identified as a 'legacy integration' that 'could be used to improperly authenticate certain Dropbox accounts.'
- Company spokesperson Tim Rathschmidt noted that compromised accounts lacked multi-factor authentication, and hackers accessed files in fewer than a third of the affected accounts.
- Dropbox removed links between Lenovo IDs and accounts, expired all sessions previously 'authenticated' through the integration, and reported the incident to data protection regulators.
- Shares of Dropbox fell around 2.4 per cent in extended trading on Tuesday, though Lenovo stated its own customers were not affected by the incident.
36 Articles
36 Articles
Over 5,000 Dropbox accounts have been hacked, and the attackers only needed an email address
Hackers exploited Lenovo’s flawed email verification to hijack ~5,000 Dropbox accountsAttackers created Lenovo IDs with victims’ emails, bypassing login; 2FA absence worsened impactDropbox ended Lenovo ID logins, expired sessions, and urged password changes plus 2FA setupAround 5,000 Dropbox user accounts were compromised when hackers found a vulnerability in the Lenovo ID verification process. What does a Lenovo flaw have to do with people’s Dr…
The Register
IT Security News - cybersecurity, infosecurity newsLegacy Lenovo login opens 5,000 Dropbox accounts to attackers
Cloud storage biz severs old integration and urges victims to reset credentials
Dropbox hack exposes 5,000 accounts as hackers access and download users’ files - Tech Startups
Dropbox said hackers compromised around 5,000 user accounts last month, gaining unauthorized access to its cloud storage service and, in some cases, viewing and downloading files. The breach traces back to a legacy connection with Lenovo ID, exposing a weak […] The post Dropbox hack exposes 5,000 accounts as hackers access and download users’ files first appeared on Tech Startups.
Dropbox reported on Tuesday that approximately 5,000 accounts were compromised in August, with hackers viewing and downloading content stored on the cloud storage platform. Some Dropbox users received an email from the company on Monday (31) notifying them that their accounts had been accessed without authorization between August 4 and August 21, the company confirmed after Bloomberg News reported the intrusion earlier that day. Hackers accesse…
Coverage Details
Bias Distribution
- 42% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
