Hackers infiltrated thousands of Dropbox accounts last month, accessing and downloading user files stored on the cloud platform. The company confirmed the breach in a statement reviewed by Bloomberg News.
Dropbox disclosed that unauthorized actors gained access to multiple user accounts, compromising files stored on its cloud-storage service. The breach occurred last month, with attackers viewing and downloading material from affected accounts.
The company has not released specific numbers on how many accounts were compromised or details on the scope of data accessed. Bloomberg News obtained records related to the incident that corroborate Dropbox's statement about the unauthorized access.
This marks a significant security incident for the file-hosting platform, which serves millions of users globally. Dropbox did not immediately provide information about how attackers gained entry to the accounts or whether specific security vulnerabilities were exploited.
The breach raises questions about account security practices and whether multi-factor authentication or other protective measures were enabled on compromised accounts. Users of cloud-storage services typically store sensitive documents, photos, and other personal files on such platforms.
Dropbox has not announced plans for mandatory password resets or other immediate remediation steps for affected users. The company's statement did not specify whether it has contacted breached account holders or provided guidance on securing compromised data.
This incident adds to a growing list of security breaches affecting major technology platforms. Cloud-storage providers have faced increased scrutiny over data protection practices as cyber attacks become more sophisticated and frequent.
Users are generally advised to enable multi-factor authentication on cloud accounts, use strong passwords, and review account activity logs regularly. Security experts recommend checking for unauthorized file sharing or access attempts following any breach notification.
A newly launched dark web marketplace is selling digital scans of over 153 million driver's licenses from U.S. and Canadian residents. The FBI's New Orleans field office has opened an investigation into the breach, which appears to originate from a Louisiana-based identity verification company.
Five Venezuelan nationals have pleaded guilty to conducting ATM jackpotting attacks across the United States, using malware to extract cash from automated teller machines.
Threat actors are leveraging the legitimate Faronics Deploy endpoint-management platform to gain administrative control over targeted computers and install ScreenConnect remote support software.
X is investigating a surge of unsolicited password reset emails following the launch of its X Money payments service. The company believes the incidents may be connected to the new platform.