If you use Dropbox you should probably change your password.
Headline: #Dropbox Hacked! Threat Actor Accessed Passwords and Phone Numbers
Snippet: A quick analysis revealed that a threat actor had broken in to access customer information such as emails, usernames, phone numbers and hashed passwords, as well as general account settings and certain authentication information (API keys, OAuth tokens, and multi-factor authentication).
@sigh_d It appears so, and as somebody who isn't a DropBox user I'm not sure if "DropBox Sign" accounts are the same as DropBox storage accounts, or if they're separate. I would assume they are the same, so if you had an account with DropBox Sign and it became compromised, that probably grants access to files stored in your DropBox account as well.
@gerowen@sigh_d Dropbox Sign is the rebranded Hellosign product that Dropbox acquired in 2019. According this post on their site their infrastructure is largely isolated from the rest of Dropbox. (And as far as a I know the account for hellosign/dropbox sign to sign or request signatures - I’ve only used it in the past to sign things - is separate from my main Dropbox account and has different credentials.
Add comment