Dropbox claims password 'leaks' not due to hack
Dropbox has denied a recent leak of hundreds of usernames and passwords was down to hackers
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
You are now subscribed
Your newsletter sign-up was successful
Dropbox has assured users it has not been hacked, despite the recent leaking of hundreds of usernames and passwords on text-sharing site Pastebin.
The alleged user details have been posted within three documents on the anonymous website, and the person behind the account in question claims to have hacked into around seven million accounts through a third-party service in order to retrieve and share the data.
To fund their efforts, the hacker' has asked for Bitcoin donations.
"We will keep releasing more to the public as donations come in, show your support," the user wrote on Pastebin.
As reported by The Next Web, a number of the examples posted had already expired: "Dropbox has not been hacked," the company told the site.
Further responding to the incident, a spokesperson for Dropbox said: "These usernames and passwords were unfortunately stolen from other services and used in attempts to log in to Dropbox accounts.
"We'd previously detected these attacks, and the vast majority of the passwords posted have been expired for some time now. All other remaining passwords have been expired as well."
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Dropbox assured worried users that it resets passwords on accounts thought to be affected by suspicious activity,' and did so a number of months ago.
Edward Snowden recently urged security-conscious users to steer clear of services such as Dropbox, after previously calling it "hostile to privacy."
Caroline has been writing about technology for more than a decade, switching between consumer smart home news and reviews and in-depth B2B industry coverage. In addition to her work for IT Pro and Cloud Pro, she has contributed to a number of titles including Expert Reviews, TechRadar, The Week and many more. She is currently the smart home editor across Future Publishing's homes titles.
You can get in touch with Caroline via email at caroline.preece@futurenet.com.
-
Will AI hiring entrench gender bias?ITPro Podcast Leaders need to proactive as attackers launch more consistent, sophisticated attacks
-
Met Office hails huge efficiency gains in first year of cloud supercomputing with Microsoft AzureNews In moving to the cloud, the Met Office has bolstered operational resilience and helped to deliver more accurate forecasts
-
Using AI to generate passwords is a terrible idea, experts warnNews Researchers have warned the use of AI-generated passwords puts users and businesses at risk
-
Researchers called on LastPass, Dashlane, and Bitwarden to up defenses after severe flaws put 60 million users at risk – here’s how each company respondedNews Analysts at ETH Zurich called for cryptographic standard improvements after a host of password managers were found lacking
-
Thousands of exposed civil servant passwords are up for grabs onlineNews While the password security failures are concerning, they pale in comparison to other nations
-
Gen Z has a cyber hygiene problemNews A new survey shows Gen Z is far less concerned about cybersecurity than older generations
-
Passwords are a problem: why device-bound passkeys can be the future of secure authenticationIndustry insights AI-driven cyberthreats demand a passwordless future…
-
LastPass just launched a tool to help security teams keep tabs on shadow IT risksNews Companies need to know what apps their employees are using, so LastPass made a browser extension to help
-
The NCSC wants you to start using password managers and passkeys – here’s how to choose the best optionsNews New guidance from the NCSC recommends using passkeys and password managers – but how can you choose the best option? ITPro has you covered.
-
I love magic links – why aren’t more services using them?Opinion Using magic links instead of passwords is safe and easy but they’re still infuriatingly underused by businesses
