Dropbox: Password Breach Led to Spam

JMH

Emeritus, Contributor
Joined
Apr 2, 2012
Posts
7,197
Two weeks ago, many Dropbox users began suspecting a data breach at the online file-sharing service after they started receiving spam at email addresses they’d created specifically for use at Dropbox. Today, the company confirmed that suspicion, blaming the incident on a Dropbox employee who had re-used his or her Dropbox password at another site that got hacked.

In a statement released on its blog this evening, DropBox’s Aditya Agarwal wrote:

Our investigation found that usernames and passwords recently stolen from other websites were used to sign in to a small number of Dropbox accounts. We’ve contacted these users and have helped them protect their accounts.
A stolen password was also used to access an employee Dropbox account containing a project document with user email addresses. We believe this improper access is what led to the spam. We’re sorry about this, and have put additional controls in place to help make sure it doesn’t happen again.

http://krebsonsecurity.com/2012/07/...ign=Feed:+KrebsOnSecurity+(Krebs+on+Security)
 
I feel like a LastPass and Yubikey is a must if you work for a company involving a website that uses logins to store things, etc :P

Joking of course, but it's a great idea since security is such an issue these days.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top