So far, Dropbox doesn’t believe that any accounts have been improperly accessed, the company said in a blog post.

Dropbox earlier disclosed that usernames and passwords that were obtained in 2012 were used to access some accounts. That file pertains to passwords that were likely obtained in connection to the LinkedIn hack. While the information appears to have been taken from then and quietly held for some time, it is now surfacing, this person said. Even though the data for these accounts is old, often passwords remain unchanged for long periods of time and are re-used across multiple accounts, leaving entire online identities vulnerable to hacks.ĭropbox’s intelligence team identified the existence of a file that contained hashed and salted passwords, according to a person familiar with the matter. In recent months, treasure troves of user credentials and passwords - in addition to a large MySpace hack disclosed in May - have been discovered. The action appears to be related to continued fallout over the massive hack on LinkedIn in 2012 where credentials for 117 million accounts were posted online. Dropbox is requiring users who have not changed their passwords since mid-2012 to reset their passwords this afternoon.

Dropbox sign in forgot password