Attackers reportedly gained access to existing Dropbox accounts by exploiting a weakness in the authentication process, according to Decrypt. The hackers allegedly created Lenovo IDs using the email addresses of Dropbox users. Those accounts could then be used to sign in to the corresponding Dropbox accounts without entering the victims’ passwords. The reported incident highlights a potential link between account-registration systems and unauthorized access to third-party services. The available information does not specify how many Dropbox accounts were affected, when the activity began, or whether files and other user data were accessed. No information was provided on any impact to cryptocurrency markets or the digital assets tracked on this page. Users should rely on official communications from Dropbox and Lenovo for verified details about the incident and any recommended security steps.
