Breachesby GlyphDropbox
Disclosed Nov 1, 2022Unverified
Phishing attack lets hacker steal 130 Dropbox GitHub repositories
Dropbox said a threat actor phished employee credentials, accessed one of its GitHub organizations and copied 130 code repositories. It said the code contained some credentials, mainly API keys used by developers, but no customer content or core app code.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Nov 1, 2022 |
| Attack | Phishing |
| Data exposed | Source codeAPI keys |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
Other breaches at Dropbox
Lenovo ID verification flaw let attacker access about 5,000 Dropbox accountsVendor breach, data exposed not stated.Vendor breach5,000 affectedTechUSUnverifiedSep 2Material cybersecurity incident reported to the SEC (8-K Item 1.05)Material cybersecurity incident reported to the SEC (8-K Item 1.05)TechUSMay 1, 2024Stolen employee password leads to Dropbox user email theft; 68M credentials later leakCredential stuffing exposed emails and passwords.Credential stuffing69M affectedTechUSJul 31, 2012
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.