Lenovo email verification flaw lets attackers breach about 5,000 Dropbox accounts
Attackers exploited a flaw in Lenovo's email verification to create Lenovo IDs linked to other people's email addresses, then accessed Dropbox accounts. About 5,000 accounts were compromised, and some files were viewed or downloaded. Dropbox confirmed the compromise of those accounts.
Key facts
- Affected organisation
- Dropbox
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- About 5,000 accounts compromised; some files viewed or downloaded
- Cause / method
- Exploitation of a Lenovo email verification flaw to create Lenovo IDs in other people's names and access Dropbox accounts
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- It emerged that exploitation of a Lenovo email verification flaw led to the compromise of about 5,000 Dropbox accounts and the viewing or downloading of some files.
- Dropbox confirmed the compromise of about 5,000 accounts through Lenovo IDs.
4 related reports
Other incidents at Dropbox
Dropbox Sign hack gives attackers access to passwords and phone numbers
Impact: Attacker access to passwords and phone numbers
Dropbox Sign, Dropbox's e-signature service, was hacked. Attackers accessed passwords and phone numbers; the specific scale of damage and the response have not been confirmed.
Related reports: 2 →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.