Dropbox was hacked!
After a two-week investigation, dropbox service confirms that sensitive data was stolen from other Web sites and then used to access Dropbox accounts.
Two weeks ago a few hundred Dropbox users began receiving spam emails about online casinos and gambling sites. Dropbox confirmed today that hackers used usernames and passwords to get into Dropbox users’ accounts.
“Our investigation found that usernames and passwords recently stolen from other websites were used to sign in to a small number of Dropbox accounts. We’ve contacted these users and have helped them protect their accounts,” Dropbox admitted. “A password was also used to access an employee Dropbox account containing a project document with user email addresses. We believe this improper access is what led to the spam.”
Several Dropbox users posted on the company’s Web site forum saying they received spam from email addresses only associated with Dropbox. 295 people had posted on the forum. Most of the affected users were European, coming from Holland, the U.K and Germany.