Dropbox Sign hack gives attackers access to passwords and phone numbers
Dropbox Sign, Dropbox's e-signature service, was hacked. Attackers accessed passwords and phone numbers; the specific scale of damage and the response have not been confirmed.
Key facts
- Affected organisation
- Dropbox
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Attacker access to passwords and phone numbers
- Cause / method
- Hack of an e-signature service
- Location
- United States
If your data was exposed
Exposed dataPhone numberPassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The Dropbox Sign hack and attackers' access to passwords and phone numbers came to light.
2 related reports
Other incidents at Dropbox
Lenovo email verification flaw lets attackers breach about 5,000 Dropbox accounts
5kImpact: About 5,000 accounts compromised; some files viewed or downloaded
Attackers exploited a flaw in Lenovo's email verification to create Lenovo IDs linked to other people's email addresses, then accessed Dropbox accounts. About 5,000 accounts were compromised, and some files were viewed or downloaded. Dropbox confirmed the compromise of those accounts.
Related reports: 4 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.