Dropbox Sign Breached by Hackers, Exposing User Information
Dropbox Inc. revealed that its digital signature product, Dropbox Sign, fell victim to a cyberattack perpetrated by hackers, resulting in the unauthorized access of user data, including emails, usernames, and phone numbers. The software company acknowledged the breach on April 24, swiftly taking measures to mitigate the incident and promptly informing law enforcement and regulatory
Dropbox-Sign-Breached-by-Hackers-Exposing-User-Information
Dropbox Inc. revealed that its digital signature product, Dropbox Sign, fell victim to a cyberattack perpetrated by hackers, resulting in the unauthorized access of user data, including emails, usernames, and phone numbers.
The software company acknowledged the breach on April 24, swiftly taking measures to mitigate the incident and promptly informing law enforcement and regulatory authorities of the security breach.
In a regulatory filing released on Wednesday, Dropbox stated, “We discovered that the threat actor had accessed data related to all users of Dropbox Sign, such as emails and usernames, in addition to general account settings.” Additionally, for certain subsets of users, the hackers gained access to phone numbers, hashed passwords, and specific authentication information like API keys, OAuth tokens, and multi-factor authentication details.
Despite the intrusion, Dropbox assured users that there is no evidence to suggest that hackers obtained access to user accounts or payment information.
The breach appears to have been contained within the Dropbox Sign product, with no other products affected by the cyberattack. However, the company refrained from disclosing the exact number of customers impacted by the security breach.
With over 18 million paying users, Dropbox, headquartered in San Francisco, stands as a prominent figure in the cloud storage industry, reporting $2.5 billion in revenue in 2023. While a significant portion of its user base comprises consumers and small businesses, the company also serves corporate clients such as Dentsu Group Inc.
Over the years, Dropbox has diversified its offerings beyond storage, expanding into document management services and video-specific tools.
Despite the breach, Dropbox stated in its filing that it does not anticipate a substantial financial impact on the company’s operations. Nevertheless, the disclosure of the cyberattack led to a 2.5% decline in the company’s shares during extended trading, adding to a year-to-date decrease of 20%.
