Dropbox Data Breach

What happened

In mid-2012, Dropbox suffered a data breach which exposed the stored credentials of tens of millions of their customers. In August 2016, they forced password resets for customers they believed may be at risk. A large volume of data totalling over 68 million records was subsequently traded online and included email addresses and salted hashes of passwords (half of them SHA1, half of them bcrypt).

Exposed data

Recommended actions

• Change your Dropbox password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Dropbox — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.