Dropbox reports compromise of about 5,000 accounts
Cloud storage service Dropbox reported that about 5,000 accounts were compromised in August. Attackers viewed and downloaded content that users had stored on the platform.
Unauthorized access in August
As Channel NewsAsia reports, some users received emails from Dropbox about unauthorized access to their accounts between August 4 and 21. The company confirmed the information after Bloomberg News had previously reported the incident.
According to Dropbox, files were accessed in fewer than one-third of the compromised accounts. The company also said it had informed data protection regulators about the incident.
More current news is available on the UA.News Telegram channel Telegram.
Connection to Lenovo ID
Dropbox told Reuters that it had identified unauthorized access to accounts linked to Lenovo ID that did not have two-factor authentication enabled. The service then terminated all sessions authorized through Lenovo ID.
The company also removed links between Lenovo ID and Dropbox accounts and changed the access system: users must now enter their Dropbox password before accessing an account through Lenovo. Lenovo said it had identified an outdated integration between Lenovo ID and Dropbox that could be used to improperly authenticate some Dropbox accounts. The company said its own customers were not affected and that the investigation is ongoing.
